@cardanowall/sdk-ts 0.1.0 → 0.2.0

package/dist/ids/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/ids/crockford-base32.ts","../../src/ids/prefixed-id.ts","../../src/ids/zod-schemas.ts"],"names":["z"],"mappings":";;;;;AAiBA,IAAM,QAAA,GAAW,kCAAA;AAIjB,IAAM,gBAA2B,MAAM;AACrC,EAAA,MAAM,QAAQ,IAAI,SAAA,CAAU,GAAG,CAAA,CAAE,KAAK,EAAE,CAAA;AACxC,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,QAAA,CAAS,QAAQ,CAAA,EAAA,EAAK;AACxC,IAAA,MAAM,EAAA,GAAK,QAAA,CAAS,UAAA,CAAW,CAAC,CAAA;AAChC,IAAA,KAAA,CAAM,EAAE,CAAA,GAAI,CAAA;AAEZ,IAAA,MAAM,KAAA,GAAQ,OAAO,YAAA,CAAa,EAAE,EAAE,WAAA,EAAY,CAAE,WAAW,CAAC,CAAA;AAChE,IAAA,KAAA,CAAM,KAAK,CAAA,GAAI,CAAA;AAAA,EACjB;AAEA,EAAA,KAAA,CAAM,GAAA,CAAI,UAAA,CAAW,CAAC,CAAC,CAAA,GAAI,CAAA;AAC3B,EAAA,KAAA,CAAM,GAAA,CAAI,UAAA,CAAW,CAAC,CAAC,CAAA,GAAI,CAAA;AAC3B,EAAA,KAAA,CAAM,GAAA,CAAI,UAAA,CAAW,CAAC,CAAC,CAAA,GAAI,CAAA;AAC3B,EAAA,KAAA,CAAM,GAAA,CAAI,UAAA,CAAW,CAAC,CAAC,CAAA,GAAI,CAAA;AAC3B,EAAA,KAAA,CAAM,GAAA,CAAI,UAAA,CAAW,CAAC,CAAC,CAAA,GAAI,CAAA;AAC3B,EAAA,KAAA,CAAM,GAAA,CAAI,UAAA,CAAW,CAAC,CAAC,CAAA,GAAI,CAAA;AAC3B,EAAA,OAAO,KAAA;AACT,CAAA,GAAG;AAEI,IAAM,iCAAA,GAAoC;AAS1C,SAAS,0BAA0B,KAAA,EAA2B;AACnE,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,IAAI,QAAA,GAAW,CAAA;AACf,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,QAAQ,CAAA,EAAA,EAAK;AACrC,IAAA,IAAA,GAAQ,IAAA,IAAQ,CAAA,GAAK,KAAA,CAAM,CAAC,CAAA;AAC5B,IAAA,QAAA,IAAY,CAAA;AACZ,IAAA,OAAO,YAAY,CAAA,EAAG;AACpB,MAAA,QAAA,IAAY,CAAA;AACZ,MAAA,MAAM,GAAA,GAAO,SAAS,QAAA,GAAY,EAAA;AAClC,MAAA,GAAA,IAAO,SAAS,GAAG,CAAA;AAAA,IACrB;AAAA,EACF;AACA,EAAA,IAAI,WAAW,CAAA,EAAG;AAChB,IAAA,MAAM,GAAA,GAAO,IAAA,IAAS,CAAA,GAAI,QAAA,GAAa,EAAA;AACvC,IAAA,GAAA,IAAO,SAAS,GAAG,CAAA;AAAA,EACrB;AACA,EAAA,OAAO,GAAA;AACT;AAMO,SAAS,YAAY,KAAA,EAA2B;AACrD,EAAA,IAAI,KAAA,CAAM,WAAW,EAAA,EAAI;AACvB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,yCAAA,EAA4C,KAAA,CAAM,MAAM,CAAA,CAAE,CAAA;AAAA,EAC5E;AAIA,EAAA,OAAO,0BAA0B,KAAK,CAAA;AACxC;AAOO,SAAS,YAAY,OAAA,EAA6B;AACvD,EAAA,IAAI,OAAA,CAAQ,WAAW,iCAAA,EAAmC;AACxD,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,2BAAA,EAA8B,iCAAiC,CAAA,iBAAA,EAAoB,OAAA,CAAQ,MAAM,CAAA;AAAA,KACnG;AAAA,EACF;AACA,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,EAAE,CAAA;AAC7B,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,IAAI,QAAA,GAAW,CAAA;AACf,EAAA,IAAI,MAAA,GAAS,CAAA;AACb,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,OAAA,CAAQ,QAAQ,CAAA,EAAA,EAAK;AACvC,IAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,UAAA,CAAW,CAAC,CAAA;AACjC,IAAA,MAAM,KAAA,GAAQ,IAAA,GAAO,GAAA,GAAM,YAAA,CAAa,IAAI,CAAA,GAAK,EAAA;AACjD,IAAA,IAAI,QAAQ,CAAA,EAAG;AACb,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,oCAAA,EAAuC,KAAK,SAAA,CAAU,OAAA,CAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAA;AAAA,OACjF;AAAA,IACF;AACA,IAAA,IAAA,GAAQ,QAAQ,CAAA,GAAK,KAAA;AACrB,IAAA,QAAA,IAAY,CAAA;AACZ,IAAA,IAAI,YAAY,CAAA,EAAG;AACjB,MAAA,QAAA,IAAY,CAAA;AACZ,MAAA,GAAA,CAAI,MAAA,EAAQ,CAAA,GAAK,IAAA,KAAS,QAAA,GAAY,GAAA;AAAA,IACxC;AAAA,EACF;AAIA,EAAA,IAAI,QAAA,KAAa,CAAA,IAAA,CAAM,IAAA,GAAO,CAAA,MAAS,CAAA,EAAG;AACxC,IAAA,MAAM,IAAI,MAAM,qDAAqD,CAAA;AAAA,EACvE;AACA,EAAA,OAAO,GAAA;AACT;;;ACjGA,IAAM,aAAA,GAAgB,gBAAA;AAEtB,SAAS,kBAAkB,IAAA,EAA0B;AAKnD,EAAA,MAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,IAAA,EAAM,EAAE,EAAE,WAAA,EAAY;AAC/C,EAAA,IAAI,CAAC,aAAA,CAAc,IAAA,CAAK,GAAG,CAAA,IAAK,IAAA,CAAK,OAAA,CAAQ,OAAA,EAAS,EAAE,CAAA,CAAE,MAAA,KAAW,CAAA,EAAG;AACtE,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,8CAAA,EAAiD,KAAK,SAAA,CAAU,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,EACzF;AACA,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,EAAE,CAAA;AAC7B,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,EAAA,EAAI,CAAA,EAAA,EAAK;AAC3B,IAAA,GAAA,CAAI,CAAC,CAAA,GAAI,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,GAAI,CAAC,CAAA,EAAG,EAAE,CAAA;AAAA,EACnD;AACA,EAAA,OAAO,GAAA;AACT;AAEA,SAAS,kBAAkB,KAAA,EAA2B;AACpD,EAAA,IAAI,KAAA,CAAM,WAAW,EAAA,EAAI;AACvB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,4CAAA,EAA+C,KAAA,CAAM,MAAM,CAAA,CAAE,CAAA;AAAA,EAC/E;AACA,EAAA,MAAM,MAAM,KAAA,CAAM,IAAA,CAAK,KAAA,EAAO,CAAC,MAAM,CAAA,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,SAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAAE,KAAK,EAAE,CAAA;AAC7E,EAAA,OAAO,CAAA,EAAG,GAAA,CAAI,KAAA,CAAM,CAAA,EAAG,CAAC,CAAC,CAAA,CAAA,EAAI,GAAA,CAAI,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA,CAAA,EAAI,GAAA,CAAI,KAAA,CAAM,EAAA,EAAI,EAAE,CAAC,CAAA,CAAA,EAAI,GAAA,CAAI,KAAA,CAAM,EAAA,EAAI,EAAE,CAAC,CAAA,CAAA,EAAI,GAAA,CAAI,KAAA,CAAM,EAAE,CAAC,CAAA,CAAA;AAC1G;AAMO,SAAS,gBAAA,CAAmC,QAAW,IAAA,EAA6B;AACzF,EAAA,MAAM,KAAA,GAAQ,kBAAkB,IAAI,CAAA;AACpC,EAAA,MAAM,OAAA,GAAU,YAAY,KAAK,CAAA;AACjC,EAAA,OAAO,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,OAAO,CAAA,CAAA;AAC7B;AAOO,SAAS,gBAAA,CAAmC,QAAW,OAAA,EAAyB;AACrF,EAAA,IAAI,OAAO,YAAY,QAAA,EAAU;AAC/B,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kCAAA,EAAqC,OAAO,OAAO,CAAA,CAAE,CAAA;AAAA,EACvE;AACA,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,OAAA,CAAQ,GAAG,CAAA;AAC/B,EAAA,IAAI,MAAM,CAAA,EAAG;AACX,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,yCAAA,EAA4C,KAAK,SAAA,CAAU,OAAO,CAAC,CAAA,CAAE,CAAA;AAAA,EACvF;AACA,EAAA,MAAM,YAAA,GAAe,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA;AACzC,EAAA,IAAI,iBAAiB,MAAA,EAAQ;AAC3B,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,6BAAA,EAAgC,KAAK,SAAA,CAAU,MAAM,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,YAAY,CAAC,CAAA;AAAA,KAC7F;AAAA,EACF;AACA,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,KAAA,CAAM,GAAA,GAAM,CAAC,CAAA;AAClC,EAAA,MAAM,KAAA,GAAQ,YAAY,IAAI,CAAA;AAC9B,EAAA,OAAO,kBAAkB,KAAK,CAAA;AAChC;AAOO,SAAS,YAAA,CACd,QACA,SAAA,EAC4B;AAC5B,EAAA,IAAI,OAAO,SAAA,KAAc,QAAA,EAAU,OAAO,KAAA;AAC1C,EAAA,IAAI,CAAC,SAAA,CAAU,UAAA,CAAW,GAAG,MAAM,CAAA,CAAA,CAAG,GAAG,OAAO,KAAA;AAChD,EAAA,MAAM,IAAA,GAAO,SAAA,CAAU,KAAA,CAAM,MAAA,CAAO,SAAS,CAAC,CAAA;AAC9C,EAAA,IAAI,IAAA,CAAK,MAAA,KAAW,EAAA,EAAI,OAAO,KAAA;AAE/B,EAAA,OAAO,0BAAA,CAA2B,KAAK,IAAI,CAAA;AAC7C;ACxFA,IAAM,eAAA,GAAkB,wBAAA;AAEjB,IAAM,aAAA,GAAgB;AAEtB,IAAM,WAAA,GAAcA,KAAA,CACxB,MAAA,EAAO,CACP,KAAA,CAAM,IAAI,MAAA,CAAO,CAAA,CAAA,EAAI,aAAa,CAAA,CAAA,EAAI,eAAe,CAAA,CAAA,CAAG,GAAG,gBAAgB;AAEvE,IAAM,cAAA,GAAiB,CAAA,CAAA,EAAI,aAAa,CAAA,CAAA,EAAI,eAAe,CAAA,CAAA","file":"index.cjs","sourcesContent":["// Crockford Base32 codec for 16-byte UUID payloads (yielding 26-char strings).\n//\n// Alphabet per https://www.crockford.com/base32.html — `0123456789ABCDEFGHJKMNPQRSTVWXYZ`\n// (32 symbols; the letters I, L, O, U are intentionally excluded for visual\n// disambiguation against digits and to avoid accidental profanity in\n// generated identifiers).\n//\n// Encoding: 16 raw bytes (128 bits) packs into exactly 26 base32 symbols\n// (130 bits with 2 trailing zero-padding bits we drop on encode and\n// reconstruct on decode). No `=` padding character is emitted — UUID payloads\n// are fixed-width.\n//\n// Decoding: case-insensitive (per Crockford spec); we also tolerate the\n// disambiguation map I/L → 1, O → 0. The encoded length MUST be 26 chars;\n// rejection is explicit (callers downstream feed the bytes back into a UUIDv7\n// validator anyway, so we surface the length problem at the codec boundary).\n\nconst ALPHABET = '0123456789abcdefghjkmnpqrstvwxyz';\n\n// 256-entry decode table indexed by lowercased ASCII char code. -1 = invalid.\n// We populate it once at module load.\nconst DECODE_TABLE: Int8Array = (() => {\n  const table = new Int8Array(128).fill(-1);\n  for (let i = 0; i < ALPHABET.length; i++) {\n    const ch = ALPHABET.charCodeAt(i);\n    table[ch] = i;\n    // Uppercase variant (Crockford accepts case-insensitive input).\n    const upper = String.fromCharCode(ch).toUpperCase().charCodeAt(0);\n    table[upper] = i;\n  }\n  // Crockford disambiguation: I, L → 1; O → 0; U is reserved (always invalid).\n  table['I'.charCodeAt(0)] = 1;\n  table['i'.charCodeAt(0)] = 1;\n  table['L'.charCodeAt(0)] = 1;\n  table['l'.charCodeAt(0)] = 1;\n  table['O'.charCodeAt(0)] = 0;\n  table['o'.charCodeAt(0)] = 0;\n  return table;\n})();\n\nexport const CROCKFORD_ENCODED_LENGTH_FOR_UUID = 26;\n\n/**\n * Encode `bytes.length` raw bytes as a lowercase Crockford base32 string.\n * Output length is `ceil(bytes.length * 8 / 5)` — no `=` padding character.\n * For 16-byte UUIDs this produces 26 chars; for 32-byte API-key secrets it\n * produces 52 chars (256 bits of entropy, matching the Stripe / OpenAI /\n * Anthropic secret-key entropy class).\n */\nexport function encodeBytesVariableLength(bytes: Uint8Array): string {\n  let bits = 0;\n  let bitCount = 0;\n  let out = '';\n  for (let i = 0; i < bytes.length; i++) {\n    bits = (bits << 8) | bytes[i]!;\n    bitCount += 8;\n    while (bitCount >= 5) {\n      bitCount -= 5;\n      const idx = (bits >>> bitCount) & 0x1f;\n      out += ALPHABET[idx];\n    }\n  }\n  if (bitCount > 0) {\n    const idx = (bits << (5 - bitCount)) & 0x1f;\n    out += ALPHABET[idx];\n  }\n  return out;\n}\n\n/**\n * Encode 16 raw bytes (a UUID payload) as a 26-char lowercase Crockford\n * base32 string. Throws if the input is not exactly 16 bytes.\n */\nexport function encodeBytes(bytes: Uint8Array): string {\n  if (bytes.length !== 16) {\n    throw new Error(`crockford-base32: expected 16 bytes, got ${bytes.length}`);\n  }\n  // 16 bytes × 8 = 128 bits → 26 × 5 = 130 bits; we pad the input with 2 zero\n  // bits on the right, which simply means we treat byte[15] as occupying the\n  // top 8 bits of a 10-bit window for the final two symbols.\n  return encodeBytesVariableLength(bytes);\n}\n\n/**\n * Decode a 26-char Crockford base32 string back to 16 raw bytes.\n * Case-insensitive; accepts the I/L → 1, O → 0 disambiguation mappings.\n * Throws on wrong length, invalid characters, or non-zero pad bits.\n */\nexport function decodeBytes(encoded: string): Uint8Array {\n  if (encoded.length !== CROCKFORD_ENCODED_LENGTH_FOR_UUID) {\n    throw new Error(\n      `crockford-base32: expected ${CROCKFORD_ENCODED_LENGTH_FOR_UUID}-char input, got ${encoded.length}`,\n    );\n  }\n  const out = new Uint8Array(16);\n  let bits = 0;\n  let bitCount = 0;\n  let outIdx = 0;\n  for (let i = 0; i < encoded.length; i++) {\n    const code = encoded.charCodeAt(i);\n    const value = code < 128 ? DECODE_TABLE[code]! : -1;\n    if (value < 0) {\n      throw new Error(\n        `crockford-base32: invalid character ${JSON.stringify(encoded[i])} at index ${i}`,\n      );\n    }\n    bits = (bits << 5) | value;\n    bitCount += 5;\n    if (bitCount >= 8) {\n      bitCount -= 8;\n      out[outIdx++] = (bits >>> bitCount) & 0xff;\n    }\n  }\n  // After 26 symbols × 5 = 130 bits consumed and 16 bytes × 8 = 128 bits\n  // emitted, there should be exactly 2 trailing zero pad bits. Anything else\n  // means the input wasn't produced by our encoder (or was tampered with).\n  if (bitCount !== 2 || (bits & 0x3) !== 0) {\n    throw new Error('crockford-base32: non-zero pad bits at end of input');\n  }\n  return out;\n}\n","// Stripe-style prefixed resource IDs. The Postgres column stays UUIDv7; the\n// wire form is `<prefix>_<26-char-crockford-base32>`. This module is the\n// only place that knows the byte-level encoding — everything else (Zod\n// schemas, route handlers, SDK types) consumes the helpers below.\n//\n// We intentionally do NOT bind the helpers to a closed prefix enum here: the\n// SDK is published as a versioned dependency and adding a new resource type\n// (e.g. `topup_*`) must not require an SDK bump just to validate the wire.\n// The helpers therefore take the prefix as a generic string parameter; the\n// per-resource Zod schemas in `./zod-schemas.ts` are the place to enumerate\n// the known prefixes for validation purposes.\n\nimport { decodeBytes, encodeBytes } from './crockford-base32';\n\n/**\n * Branded string type — `${prefix}_<26-base32-chars>`. The phantom `__brand`\n * field gives TypeScript a way to refuse a bare string at API boundaries\n * (`function fn(id: PrefixedId<'poe'>)`) while staying ABI-compatible with\n * `string` on the wire and in JSON serialisation.\n */\nexport type PrefixedId<P extends string> = `${P}_${string}` & { readonly __brand: P };\n\n// 32-char hex UUID without separators is what the encoder converts to bytes.\nconst UUID_RE_BYTES = /^[0-9a-f]{32}$/;\n\nfunction uuidStringToBytes(uuid: string): Uint8Array {\n  // Accept canonical 8-4-4-4-12 hyphenated form (case-insensitive) only —\n  // this is what every UUIDv4/v7 library produces and what Postgres returns\n  // for the UUIDv7 columns. Anything else (no hyphens, wrong width, non-hex)\n  // is rejected.\n  const hex = uuid.replace(/-/g, '').toLowerCase();\n  if (!UUID_RE_BYTES.test(hex) || uuid.replace(/[^-]/g, '').length !== 4) {\n    throw new Error(`prefixed-id: not a canonical hyphenated UUID: ${JSON.stringify(uuid)}`);\n  }\n  const out = new Uint8Array(16);\n  for (let i = 0; i < 16; i++) {\n    out[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);\n  }\n  return out;\n}\n\nfunction bytesToUuidString(bytes: Uint8Array): string {\n  if (bytes.length !== 16) {\n    throw new Error(`prefixed-id: expected 16 decoded bytes, got ${bytes.length}`);\n  }\n  const hex = Array.from(bytes, (b) => b.toString(16).padStart(2, '0')).join('');\n  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;\n}\n\n/**\n * Encode a bare canonical UUID string (8-4-4-4-12 hyphenated) into the\n * Stripe-style wire form `${prefix}_<crockford>`.\n */\nexport function encodePrefixedId<P extends string>(prefix: P, uuid: string): PrefixedId<P> {\n  const bytes = uuidStringToBytes(uuid);\n  const encoded = encodeBytes(bytes);\n  return `${prefix}_${encoded}` as PrefixedId<P>;\n}\n\n/**\n * Decode a wire-format prefixed id back to the bare canonical UUID string.\n * Throws when the prefix does not match, the body is not 26 base32 chars,\n * or the encoded payload is malformed.\n */\nexport function decodePrefixedId<P extends string>(prefix: P, encoded: string): string {\n  if (typeof encoded !== 'string') {\n    throw new Error(`prefixed-id: expected string, got ${typeof encoded}`);\n  }\n  const sep = encoded.indexOf('_');\n  if (sep < 0) {\n    throw new Error(`prefixed-id: missing prefix separator in ${JSON.stringify(encoded)}`);\n  }\n  const actualPrefix = encoded.slice(0, sep);\n  if (actualPrefix !== prefix) {\n    throw new Error(\n      `prefixed-id: expected prefix ${JSON.stringify(prefix)}, got ${JSON.stringify(actualPrefix)}`,\n    );\n  }\n  const body = encoded.slice(sep + 1);\n  const bytes = decodeBytes(body);\n  return bytesToUuidString(bytes);\n}\n\n/**\n * Type guard. Cheap-check: matches the prefix and the lowercase Crockford\n * length, but does NOT validate the payload bytes round-trip. Use\n * `decodePrefixedId` when a full validation is required.\n */\nexport function isPrefixedId<P extends string>(\n  prefix: P,\n  candidate: unknown,\n): candidate is PrefixedId<P> {\n  if (typeof candidate !== 'string') return false;\n  if (!candidate.startsWith(`${prefix}_`)) return false;\n  const body = candidate.slice(prefix.length + 1);\n  if (body.length !== 26) return false;\n  // Strict Crockford alphabet — no I, L, O, U; lowercase only on the wire.\n  return /^[0-9a-hjkmnp-tv-z]{26}$/.test(body);\n}\n","// Zod schema gating the CIP-309 record id at every parse boundary (HTTP route\n// handlers, SDK input validation, OpenAPI registration).\n//\n// The regex is the strict Crockford-32 alphabet (lowercase only on the wire,\n// no I/L/O/U). This is stricter than `[0-9a-z]{26}` because it catches the\n// most common typo classes (`poe_…ol1u…`) at the parser rather than letting\n// them through to the decoder for a confusing `non-zero pad bits` error.\n\nimport { z } from 'zod';\n\nconst CROCKFORD_LOWER = '[0-9a-hjkmnp-tv-z]{26}';\n\nexport const POE_ID_PREFIX = 'poe' as const;\n\nexport const PoeIdSchema = z\n  .string()\n  .regex(new RegExp(`^${POE_ID_PREFIX}_${CROCKFORD_LOWER}$`), 'invalid poe id');\n\nexport const POE_ID_PATTERN = `^${POE_ID_PREFIX}_${CROCKFORD_LOWER}$`;\n"]}
+{"version":3,"sources":["../../src/ids/crockford-base32.ts","../../src/ids/prefixed-id.ts","../../src/ids/zod-schemas.ts"],"names":["z"],"mappings":";;;;;AAiBA,IAAM,QAAA,GAAW,kCAAA;AAIjB,IAAM,gBAA2B,MAAM;AACrC,EAAA,MAAM,QAAQ,IAAI,SAAA,CAAU,GAAG,CAAA,CAAE,KAAK,EAAE,CAAA;AACxC,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,QAAA,CAAS,QAAQ,CAAA,EAAA,EAAK;AACxC,IAAA,MAAM,EAAA,GAAK,QAAA,CAAS,UAAA,CAAW,CAAC,CAAA;AAChC,IAAA,KAAA,CAAM,EAAE,CAAA,GAAI,CAAA;AAEZ,IAAA,MAAM,KAAA,GAAQ,OAAO,YAAA,CAAa,EAAE,EAAE,WAAA,EAAY,CAAE,WAAW,CAAC,CAAA;AAChE,IAAA,KAAA,CAAM,KAAK,CAAA,GAAI,CAAA;AAAA,EACjB;AAEA,EAAA,KAAA,CAAM,GAAA,CAAI,UAAA,CAAW,CAAC,CAAC,CAAA,GAAI,CAAA;AAC3B,EAAA,KAAA,CAAM,GAAA,CAAI,UAAA,CAAW,CAAC,CAAC,CAAA,GAAI,CAAA;AAC3B,EAAA,KAAA,CAAM,GAAA,CAAI,UAAA,CAAW,CAAC,CAAC,CAAA,GAAI,CAAA;AAC3B,EAAA,KAAA,CAAM,GAAA,CAAI,UAAA,CAAW,CAAC,CAAC,CAAA,GAAI,CAAA;AAC3B,EAAA,KAAA,CAAM,GAAA,CAAI,UAAA,CAAW,CAAC,CAAC,CAAA,GAAI,CAAA;AAC3B,EAAA,KAAA,CAAM,GAAA,CAAI,UAAA,CAAW,CAAC,CAAC,CAAA,GAAI,CAAA;AAC3B,EAAA,OAAO,KAAA;AACT,CAAA,GAAG;AAEI,IAAM,iCAAA,GAAoC;AAS1C,SAAS,0BAA0B,KAAA,EAA2B;AACnE,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,IAAI,QAAA,GAAW,CAAA;AACf,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,QAAQ,CAAA,EAAA,EAAK;AACrC,IAAA,IAAA,GAAQ,IAAA,IAAQ,CAAA,GAAK,KAAA,CAAM,CAAC,CAAA;AAC5B,IAAA,QAAA,IAAY,CAAA;AACZ,IAAA,OAAO,YAAY,CAAA,EAAG;AACpB,MAAA,QAAA,IAAY,CAAA;AACZ,MAAA,MAAM,GAAA,GAAO,SAAS,QAAA,GAAY,EAAA;AAClC,MAAA,GAAA,IAAO,SAAS,GAAG,CAAA;AAAA,IACrB;AAAA,EACF;AACA,EAAA,IAAI,WAAW,CAAA,EAAG;AAChB,IAAA,MAAM,GAAA,GAAO,IAAA,IAAS,CAAA,GAAI,QAAA,GAAa,EAAA;AACvC,IAAA,GAAA,IAAO,SAAS,GAAG,CAAA;AAAA,EACrB;AACA,EAAA,OAAO,GAAA;AACT;AAMO,SAAS,YAAY,KAAA,EAA2B;AACrD,EAAA,IAAI,KAAA,CAAM,WAAW,EAAA,EAAI;AACvB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,yCAAA,EAA4C,KAAA,CAAM,MAAM,CAAA,CAAE,CAAA;AAAA,EAC5E;AAIA,EAAA,OAAO,0BAA0B,KAAK,CAAA;AACxC;AAOO,SAAS,YAAY,OAAA,EAA6B;AACvD,EAAA,IAAI,OAAA,CAAQ,WAAW,iCAAA,EAAmC;AACxD,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,2BAAA,EAA8B,iCAAiC,CAAA,iBAAA,EAAoB,OAAA,CAAQ,MAAM,CAAA;AAAA,KACnG;AAAA,EACF;AACA,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,EAAE,CAAA;AAC7B,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,IAAI,QAAA,GAAW,CAAA;AACf,EAAA,IAAI,MAAA,GAAS,CAAA;AACb,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,OAAA,CAAQ,QAAQ,CAAA,EAAA,EAAK;AACvC,IAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,UAAA,CAAW,CAAC,CAAA;AACjC,IAAA,MAAM,KAAA,GAAQ,IAAA,GAAO,GAAA,GAAM,YAAA,CAAa,IAAI,CAAA,GAAK,EAAA;AACjD,IAAA,IAAI,QAAQ,CAAA,EAAG;AACb,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,oCAAA,EAAuC,KAAK,SAAA,CAAU,OAAA,CAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAA;AAAA,OACjF;AAAA,IACF;AACA,IAAA,IAAA,GAAQ,QAAQ,CAAA,GAAK,KAAA;AACrB,IAAA,QAAA,IAAY,CAAA;AACZ,IAAA,IAAI,YAAY,CAAA,EAAG;AACjB,MAAA,QAAA,IAAY,CAAA;AACZ,MAAA,GAAA,CAAI,MAAA,EAAQ,CAAA,GAAK,IAAA,KAAS,QAAA,GAAY,GAAA;AAAA,IACxC;AAAA,EACF;AAIA,EAAA,IAAI,QAAA,KAAa,CAAA,IAAA,CAAM,IAAA,GAAO,CAAA,MAAS,CAAA,EAAG;AACxC,IAAA,MAAM,IAAI,MAAM,qDAAqD,CAAA;AAAA,EACvE;AACA,EAAA,OAAO,GAAA;AACT;;;ACjGA,IAAM,aAAA,GAAgB,gBAAA;AAEtB,SAAS,kBAAkB,IAAA,EAA0B;AAKnD,EAAA,MAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,IAAA,EAAM,EAAE,EAAE,WAAA,EAAY;AAC/C,EAAA,IAAI,CAAC,aAAA,CAAc,IAAA,CAAK,GAAG,CAAA,IAAK,IAAA,CAAK,OAAA,CAAQ,OAAA,EAAS,EAAE,CAAA,CAAE,MAAA,KAAW,CAAA,EAAG;AACtE,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,8CAAA,EAAiD,KAAK,SAAA,CAAU,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,EACzF;AACA,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,EAAE,CAAA;AAC7B,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,EAAA,EAAI,CAAA,EAAA,EAAK;AAC3B,IAAA,GAAA,CAAI,CAAC,CAAA,GAAI,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,GAAI,CAAC,CAAA,EAAG,EAAE,CAAA;AAAA,EACnD;AACA,EAAA,OAAO,GAAA;AACT;AAEA,SAAS,kBAAkB,KAAA,EAA2B;AACpD,EAAA,IAAI,KAAA,CAAM,WAAW,EAAA,EAAI;AACvB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,4CAAA,EAA+C,KAAA,CAAM,MAAM,CAAA,CAAE,CAAA;AAAA,EAC/E;AACA,EAAA,MAAM,MAAM,KAAA,CAAM,IAAA,CAAK,KAAA,EAAO,CAAC,MAAM,CAAA,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,SAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAAE,KAAK,EAAE,CAAA;AAC7E,EAAA,OAAO,CAAA,EAAG,GAAA,CAAI,KAAA,CAAM,CAAA,EAAG,CAAC,CAAC,CAAA,CAAA,EAAI,GAAA,CAAI,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA,CAAA,EAAI,GAAA,CAAI,KAAA,CAAM,EAAA,EAAI,EAAE,CAAC,CAAA,CAAA,EAAI,GAAA,CAAI,KAAA,CAAM,EAAA,EAAI,EAAE,CAAC,CAAA,CAAA,EAAI,GAAA,CAAI,KAAA,CAAM,EAAE,CAAC,CAAA,CAAA;AAC1G;AAMO,SAAS,gBAAA,CAAmC,QAAW,IAAA,EAA6B;AACzF,EAAA,MAAM,KAAA,GAAQ,kBAAkB,IAAI,CAAA;AACpC,EAAA,MAAM,OAAA,GAAU,YAAY,KAAK,CAAA;AACjC,EAAA,OAAO,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,OAAO,CAAA,CAAA;AAC7B;AAOO,SAAS,gBAAA,CAAmC,QAAW,OAAA,EAAyB;AACrF,EAAA,IAAI,OAAO,YAAY,QAAA,EAAU;AAC/B,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kCAAA,EAAqC,OAAO,OAAO,CAAA,CAAE,CAAA;AAAA,EACvE;AACA,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,OAAA,CAAQ,GAAG,CAAA;AAC/B,EAAA,IAAI,MAAM,CAAA,EAAG;AACX,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,yCAAA,EAA4C,KAAK,SAAA,CAAU,OAAO,CAAC,CAAA,CAAE,CAAA;AAAA,EACvF;AACA,EAAA,MAAM,YAAA,GAAe,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA;AACzC,EAAA,IAAI,iBAAiB,MAAA,EAAQ;AAC3B,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,6BAAA,EAAgC,KAAK,SAAA,CAAU,MAAM,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,YAAY,CAAC,CAAA;AAAA,KAC7F;AAAA,EACF;AACA,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,KAAA,CAAM,GAAA,GAAM,CAAC,CAAA;AAClC,EAAA,MAAM,KAAA,GAAQ,YAAY,IAAI,CAAA;AAC9B,EAAA,OAAO,kBAAkB,KAAK,CAAA;AAChC;AAOO,SAAS,YAAA,CACd,QACA,SAAA,EAC4B;AAC5B,EAAA,IAAI,OAAO,SAAA,KAAc,QAAA,EAAU,OAAO,KAAA;AAC1C,EAAA,IAAI,CAAC,SAAA,CAAU,UAAA,CAAW,GAAG,MAAM,CAAA,CAAA,CAAG,GAAG,OAAO,KAAA;AAChD,EAAA,MAAM,IAAA,GAAO,SAAA,CAAU,KAAA,CAAM,MAAA,CAAO,SAAS,CAAC,CAAA;AAC9C,EAAA,IAAI,IAAA,CAAK,MAAA,KAAW,EAAA,EAAI,OAAO,KAAA;AAE/B,EAAA,OAAO,0BAAA,CAA2B,KAAK,IAAI,CAAA;AAC7C;ACxFA,IAAM,eAAA,GAAkB,wBAAA;AAEjB,IAAM,aAAA,GAAgB;AAEtB,IAAM,WAAA,GAAcA,KAAA,CACxB,MAAA,EAAO,CACP,KAAA,CAAM,IAAI,MAAA,CAAO,CAAA,CAAA,EAAI,aAAa,CAAA,CAAA,EAAI,eAAe,CAAA,CAAA,CAAG,GAAG,gBAAgB;AAEvE,IAAM,cAAA,GAAiB,CAAA,CAAA,EAAI,aAAa,CAAA,CAAA,EAAI,eAAe,CAAA,CAAA","file":"index.cjs","sourcesContent":["// Crockford Base32 codec for 16-byte UUID payloads (yielding 26-char strings).\n//\n// Alphabet per https://www.crockford.com/base32.html — `0123456789ABCDEFGHJKMNPQRSTVWXYZ`\n// (32 symbols; the letters I, L, O, U are intentionally excluded for visual\n// disambiguation against digits and to avoid accidental profanity in\n// generated identifiers).\n//\n// Encoding: 16 raw bytes (128 bits) packs into exactly 26 base32 symbols\n// (130 bits with 2 trailing zero-padding bits we drop on encode and\n// reconstruct on decode). No `=` padding character is emitted — UUID payloads\n// are fixed-width.\n//\n// Decoding: case-insensitive (per Crockford spec); we also tolerate the\n// disambiguation map I/L → 1, O → 0. The encoded length MUST be 26 chars;\n// rejection is explicit (callers downstream feed the bytes back into a UUIDv7\n// validator anyway, so we surface the length problem at the codec boundary).\n\nconst ALPHABET = '0123456789abcdefghjkmnpqrstvwxyz';\n\n// 256-entry decode table indexed by lowercased ASCII char code. -1 = invalid.\n// We populate it once at module load.\nconst DECODE_TABLE: Int8Array = (() => {\n  const table = new Int8Array(128).fill(-1);\n  for (let i = 0; i < ALPHABET.length; i++) {\n    const ch = ALPHABET.charCodeAt(i);\n    table[ch] = i;\n    // Uppercase variant (Crockford accepts case-insensitive input).\n    const upper = String.fromCharCode(ch).toUpperCase().charCodeAt(0);\n    table[upper] = i;\n  }\n  // Crockford disambiguation: I, L → 1; O → 0; U is reserved (always invalid).\n  table['I'.charCodeAt(0)] = 1;\n  table['i'.charCodeAt(0)] = 1;\n  table['L'.charCodeAt(0)] = 1;\n  table['l'.charCodeAt(0)] = 1;\n  table['O'.charCodeAt(0)] = 0;\n  table['o'.charCodeAt(0)] = 0;\n  return table;\n})();\n\nexport const CROCKFORD_ENCODED_LENGTH_FOR_UUID = 26;\n\n/**\n * Encode `bytes.length` raw bytes as a lowercase Crockford base32 string.\n * Output length is `ceil(bytes.length * 8 / 5)` — no `=` padding character.\n * For 16-byte UUIDs this produces 26 chars; for 32-byte API-key secrets it\n * produces 52 chars (256 bits of entropy, matching the Stripe / OpenAI /\n * Anthropic secret-key entropy class).\n */\nexport function encodeBytesVariableLength(bytes: Uint8Array): string {\n  let bits = 0;\n  let bitCount = 0;\n  let out = '';\n  for (let i = 0; i < bytes.length; i++) {\n    bits = (bits << 8) | bytes[i]!;\n    bitCount += 8;\n    while (bitCount >= 5) {\n      bitCount -= 5;\n      const idx = (bits >>> bitCount) & 0x1f;\n      out += ALPHABET[idx];\n    }\n  }\n  if (bitCount > 0) {\n    const idx = (bits << (5 - bitCount)) & 0x1f;\n    out += ALPHABET[idx];\n  }\n  return out;\n}\n\n/**\n * Encode 16 raw bytes (a UUID payload) as a 26-char lowercase Crockford\n * base32 string. Throws if the input is not exactly 16 bytes.\n */\nexport function encodeBytes(bytes: Uint8Array): string {\n  if (bytes.length !== 16) {\n    throw new Error(`crockford-base32: expected 16 bytes, got ${bytes.length}`);\n  }\n  // 16 bytes × 8 = 128 bits → 26 × 5 = 130 bits; we pad the input with 2 zero\n  // bits on the right, which simply means we treat byte[15] as occupying the\n  // top 8 bits of a 10-bit window for the final two symbols.\n  return encodeBytesVariableLength(bytes);\n}\n\n/**\n * Decode a 26-char Crockford base32 string back to 16 raw bytes.\n * Case-insensitive; accepts the I/L → 1, O → 0 disambiguation mappings.\n * Throws on wrong length, invalid characters, or non-zero pad bits.\n */\nexport function decodeBytes(encoded: string): Uint8Array {\n  if (encoded.length !== CROCKFORD_ENCODED_LENGTH_FOR_UUID) {\n    throw new Error(\n      `crockford-base32: expected ${CROCKFORD_ENCODED_LENGTH_FOR_UUID}-char input, got ${encoded.length}`,\n    );\n  }\n  const out = new Uint8Array(16);\n  let bits = 0;\n  let bitCount = 0;\n  let outIdx = 0;\n  for (let i = 0; i < encoded.length; i++) {\n    const code = encoded.charCodeAt(i);\n    const value = code < 128 ? DECODE_TABLE[code]! : -1;\n    if (value < 0) {\n      throw new Error(\n        `crockford-base32: invalid character ${JSON.stringify(encoded[i])} at index ${i}`,\n      );\n    }\n    bits = (bits << 5) | value;\n    bitCount += 5;\n    if (bitCount >= 8) {\n      bitCount -= 8;\n      out[outIdx++] = (bits >>> bitCount) & 0xff;\n    }\n  }\n  // After 26 symbols × 5 = 130 bits consumed and 16 bytes × 8 = 128 bits\n  // emitted, there should be exactly 2 trailing zero pad bits. Anything else\n  // means the input wasn't produced by our encoder (or was tampered with).\n  if (bitCount !== 2 || (bits & 0x3) !== 0) {\n    throw new Error('crockford-base32: non-zero pad bits at end of input');\n  }\n  return out;\n}\n","// Stripe-style prefixed resource IDs. The Postgres column stays UUIDv7; the\n// wire form is `<prefix>_<26-char-crockford-base32>`. This module is the\n// only place that knows the byte-level encoding — everything else (Zod\n// schemas, route handlers, SDK types) consumes the helpers below.\n//\n// We intentionally do NOT bind the helpers to a closed prefix enum here: the\n// SDK is published as a versioned dependency and adding a new resource type\n// (e.g. `topup_*`) must not require an SDK bump just to validate the wire.\n// The helpers therefore take the prefix as a generic string parameter; the\n// per-resource Zod schemas in `./zod-schemas.ts` are the place to enumerate\n// the known prefixes for validation purposes.\n\nimport { decodeBytes, encodeBytes } from './crockford-base32';\n\n/**\n * Branded string type — `${prefix}_<26-base32-chars>`. The phantom `__brand`\n * field gives TypeScript a way to refuse a bare string at API boundaries\n * (`function fn(id: PrefixedId<'poe'>)`) while staying ABI-compatible with\n * `string` on the wire and in JSON serialisation.\n */\nexport type PrefixedId<P extends string> = `${P}_${string}` & { readonly __brand: P };\n\n// 32-char hex UUID without separators is what the encoder converts to bytes.\nconst UUID_RE_BYTES = /^[0-9a-f]{32}$/;\n\nfunction uuidStringToBytes(uuid: string): Uint8Array {\n  // Accept canonical 8-4-4-4-12 hyphenated form (case-insensitive) only —\n  // this is what every UUIDv4/v7 library produces and what Postgres returns\n  // for the UUIDv7 columns. Anything else (no hyphens, wrong width, non-hex)\n  // is rejected.\n  const hex = uuid.replace(/-/g, '').toLowerCase();\n  if (!UUID_RE_BYTES.test(hex) || uuid.replace(/[^-]/g, '').length !== 4) {\n    throw new Error(`prefixed-id: not a canonical hyphenated UUID: ${JSON.stringify(uuid)}`);\n  }\n  const out = new Uint8Array(16);\n  for (let i = 0; i < 16; i++) {\n    out[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);\n  }\n  return out;\n}\n\nfunction bytesToUuidString(bytes: Uint8Array): string {\n  if (bytes.length !== 16) {\n    throw new Error(`prefixed-id: expected 16 decoded bytes, got ${bytes.length}`);\n  }\n  const hex = Array.from(bytes, (b) => b.toString(16).padStart(2, '0')).join('');\n  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;\n}\n\n/**\n * Encode a bare canonical UUID string (8-4-4-4-12 hyphenated) into the\n * Stripe-style wire form `${prefix}_<crockford>`.\n */\nexport function encodePrefixedId<P extends string>(prefix: P, uuid: string): PrefixedId<P> {\n  const bytes = uuidStringToBytes(uuid);\n  const encoded = encodeBytes(bytes);\n  return `${prefix}_${encoded}` as PrefixedId<P>;\n}\n\n/**\n * Decode a wire-format prefixed id back to the bare canonical UUID string.\n * Throws when the prefix does not match, the body is not 26 base32 chars,\n * or the encoded payload is malformed.\n */\nexport function decodePrefixedId<P extends string>(prefix: P, encoded: string): string {\n  if (typeof encoded !== 'string') {\n    throw new Error(`prefixed-id: expected string, got ${typeof encoded}`);\n  }\n  const sep = encoded.indexOf('_');\n  if (sep < 0) {\n    throw new Error(`prefixed-id: missing prefix separator in ${JSON.stringify(encoded)}`);\n  }\n  const actualPrefix = encoded.slice(0, sep);\n  if (actualPrefix !== prefix) {\n    throw new Error(\n      `prefixed-id: expected prefix ${JSON.stringify(prefix)}, got ${JSON.stringify(actualPrefix)}`,\n    );\n  }\n  const body = encoded.slice(sep + 1);\n  const bytes = decodeBytes(body);\n  return bytesToUuidString(bytes);\n}\n\n/**\n * Type guard. Cheap-check: matches the prefix and the lowercase Crockford\n * length, but does NOT validate the payload bytes round-trip. Use\n * `decodePrefixedId` when a full validation is required.\n */\nexport function isPrefixedId<P extends string>(\n  prefix: P,\n  candidate: unknown,\n): candidate is PrefixedId<P> {\n  if (typeof candidate !== 'string') return false;\n  if (!candidate.startsWith(`${prefix}_`)) return false;\n  const body = candidate.slice(prefix.length + 1);\n  if (body.length !== 26) return false;\n  // Strict Crockford alphabet — no I, L, O, U; lowercase only on the wire.\n  return /^[0-9a-hjkmnp-tv-z]{26}$/.test(body);\n}\n","// Zod schema gating the Label 309 record id at every parse boundary (HTTP route\n// handlers, SDK input validation, OpenAPI registration).\n//\n// The regex is the strict Crockford-32 alphabet (lowercase only on the wire,\n// no I/L/O/U). This is stricter than `[0-9a-z]{26}` because it catches the\n// most common typo classes (`poe_…ol1u…`) at the parser rather than letting\n// them through to the decoder for a confusing `non-zero pad bits` error.\n\nimport { z } from 'zod';\n\nconst CROCKFORD_LOWER = '[0-9a-hjkmnp-tv-z]{26}';\n\nexport const POE_ID_PREFIX = 'poe' as const;\n\nexport const PoeIdSchema = z\n  .string()\n  .regex(new RegExp(`^${POE_ID_PREFIX}_${CROCKFORD_LOWER}$`), 'invalid poe id');\n\nexport const POE_ID_PATTERN = `^${POE_ID_PREFIX}_${CROCKFORD_LOWER}$`;\n"]}

package/dist/ids/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/ids/crockford-base32.ts","../../src/ids/prefixed-id.ts","../../src/ids/zod-schemas.ts"],"names":[],"mappings":";;;AAiBA,IAAM,QAAA,GAAW,kCAAA;AAIjB,IAAM,gBAA2B,MAAM;AACrC,EAAA,MAAM,QAAQ,IAAI,SAAA,CAAU,GAAG,CAAA,CAAE,KAAK,EAAE,CAAA;AACxC,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,QAAA,CAAS,QAAQ,CAAA,EAAA,EAAK;AACxC,IAAA,MAAM,EAAA,GAAK,QAAA,CAAS,UAAA,CAAW,CAAC,CAAA;AAChC,IAAA,KAAA,CAAM,EAAE,CAAA,GAAI,CAAA;AAEZ,IAAA,MAAM,KAAA,GAAQ,OAAO,YAAA,CAAa,EAAE,EAAE,WAAA,EAAY,CAAE,WAAW,CAAC,CAAA;AAChE,IAAA,KAAA,CAAM,KAAK,CAAA,GAAI,CAAA;AAAA,EACjB;AAEA,EAAA,KAAA,CAAM,GAAA,CAAI,UAAA,CAAW,CAAC,CAAC,CAAA,GAAI,CAAA;AAC3B,EAAA,KAAA,CAAM,GAAA,CAAI,UAAA,CAAW,CAAC,CAAC,CAAA,GAAI,CAAA;AAC3B,EAAA,KAAA,CAAM,GAAA,CAAI,UAAA,CAAW,CAAC,CAAC,CAAA,GAAI,CAAA;AAC3B,EAAA,KAAA,CAAM,GAAA,CAAI,UAAA,CAAW,CAAC,CAAC,CAAA,GAAI,CAAA;AAC3B,EAAA,KAAA,CAAM,GAAA,CAAI,UAAA,CAAW,CAAC,CAAC,CAAA,GAAI,CAAA;AAC3B,EAAA,KAAA,CAAM,GAAA,CAAI,UAAA,CAAW,CAAC,CAAC,CAAA,GAAI,CAAA;AAC3B,EAAA,OAAO,KAAA;AACT,CAAA,GAAG;AAEI,IAAM,iCAAA,GAAoC;AAS1C,SAAS,0BAA0B,KAAA,EAA2B;AACnE,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,IAAI,QAAA,GAAW,CAAA;AACf,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,QAAQ,CAAA,EAAA,EAAK;AACrC,IAAA,IAAA,GAAQ,IAAA,IAAQ,CAAA,GAAK,KAAA,CAAM,CAAC,CAAA;AAC5B,IAAA,QAAA,IAAY,CAAA;AACZ,IAAA,OAAO,YAAY,CAAA,EAAG;AACpB,MAAA,QAAA,IAAY,CAAA;AACZ,MAAA,MAAM,GAAA,GAAO,SAAS,QAAA,GAAY,EAAA;AAClC,MAAA,GAAA,IAAO,SAAS,GAAG,CAAA;AAAA,IACrB;AAAA,EACF;AACA,EAAA,IAAI,WAAW,CAAA,EAAG;AAChB,IAAA,MAAM,GAAA,GAAO,IAAA,IAAS,CAAA,GAAI,QAAA,GAAa,EAAA;AACvC,IAAA,GAAA,IAAO,SAAS,GAAG,CAAA;AAAA,EACrB;AACA,EAAA,OAAO,GAAA;AACT;AAMO,SAAS,YAAY,KAAA,EAA2B;AACrD,EAAA,IAAI,KAAA,CAAM,WAAW,EAAA,EAAI;AACvB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,yCAAA,EAA4C,KAAA,CAAM,MAAM,CAAA,CAAE,CAAA;AAAA,EAC5E;AAIA,EAAA,OAAO,0BAA0B,KAAK,CAAA;AACxC;AAOO,SAAS,YAAY,OAAA,EAA6B;AACvD,EAAA,IAAI,OAAA,CAAQ,WAAW,iCAAA,EAAmC;AACxD,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,2BAAA,EAA8B,iCAAiC,CAAA,iBAAA,EAAoB,OAAA,CAAQ,MAAM,CAAA;AAAA,KACnG;AAAA,EACF;AACA,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,EAAE,CAAA;AAC7B,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,IAAI,QAAA,GAAW,CAAA;AACf,EAAA,IAAI,MAAA,GAAS,CAAA;AACb,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,OAAA,CAAQ,QAAQ,CAAA,EAAA,EAAK;AACvC,IAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,UAAA,CAAW,CAAC,CAAA;AACjC,IAAA,MAAM,KAAA,GAAQ,IAAA,GAAO,GAAA,GAAM,YAAA,CAAa,IAAI,CAAA,GAAK,EAAA;AACjD,IAAA,IAAI,QAAQ,CAAA,EAAG;AACb,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,oCAAA,EAAuC,KAAK,SAAA,CAAU,OAAA,CAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAA;AAAA,OACjF;AAAA,IACF;AACA,IAAA,IAAA,GAAQ,QAAQ,CAAA,GAAK,KAAA;AACrB,IAAA,QAAA,IAAY,CAAA;AACZ,IAAA,IAAI,YAAY,CAAA,EAAG;AACjB,MAAA,QAAA,IAAY,CAAA;AACZ,MAAA,GAAA,CAAI,MAAA,EAAQ,CAAA,GAAK,IAAA,KAAS,QAAA,GAAY,GAAA;AAAA,IACxC;AAAA,EACF;AAIA,EAAA,IAAI,QAAA,KAAa,CAAA,IAAA,CAAM,IAAA,GAAO,CAAA,MAAS,CAAA,EAAG;AACxC,IAAA,MAAM,IAAI,MAAM,qDAAqD,CAAA;AAAA,EACvE;AACA,EAAA,OAAO,GAAA;AACT;;;ACjGA,IAAM,aAAA,GAAgB,gBAAA;AAEtB,SAAS,kBAAkB,IAAA,EAA0B;AAKnD,EAAA,MAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,IAAA,EAAM,EAAE,EAAE,WAAA,EAAY;AAC/C,EAAA,IAAI,CAAC,aAAA,CAAc,IAAA,CAAK,GAAG,CAAA,IAAK,IAAA,CAAK,OAAA,CAAQ,OAAA,EAAS,EAAE,CAAA,CAAE,MAAA,KAAW,CAAA,EAAG;AACtE,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,8CAAA,EAAiD,KAAK,SAAA,CAAU,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,EACzF;AACA,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,EAAE,CAAA;AAC7B,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,EAAA,EAAI,CAAA,EAAA,EAAK;AAC3B,IAAA,GAAA,CAAI,CAAC,CAAA,GAAI,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,GAAI,CAAC,CAAA,EAAG,EAAE,CAAA;AAAA,EACnD;AACA,EAAA,OAAO,GAAA;AACT;AAEA,SAAS,kBAAkB,KAAA,EAA2B;AACpD,EAAA,IAAI,KAAA,CAAM,WAAW,EAAA,EAAI;AACvB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,4CAAA,EAA+C,KAAA,CAAM,MAAM,CAAA,CAAE,CAAA;AAAA,EAC/E;AACA,EAAA,MAAM,MAAM,KAAA,CAAM,IAAA,CAAK,KAAA,EAAO,CAAC,MAAM,CAAA,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,SAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAAE,KAAK,EAAE,CAAA;AAC7E,EAAA,OAAO,CAAA,EAAG,GAAA,CAAI,KAAA,CAAM,CAAA,EAAG,CAAC,CAAC,CAAA,CAAA,EAAI,GAAA,CAAI,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA,CAAA,EAAI,GAAA,CAAI,KAAA,CAAM,EAAA,EAAI,EAAE,CAAC,CAAA,CAAA,EAAI,GAAA,CAAI,KAAA,CAAM,EAAA,EAAI,EAAE,CAAC,CAAA,CAAA,EAAI,GAAA,CAAI,KAAA,CAAM,EAAE,CAAC,CAAA,CAAA;AAC1G;AAMO,SAAS,gBAAA,CAAmC,QAAW,IAAA,EAA6B;AACzF,EAAA,MAAM,KAAA,GAAQ,kBAAkB,IAAI,CAAA;AACpC,EAAA,MAAM,OAAA,GAAU,YAAY,KAAK,CAAA;AACjC,EAAA,OAAO,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,OAAO,CAAA,CAAA;AAC7B;AAOO,SAAS,gBAAA,CAAmC,QAAW,OAAA,EAAyB;AACrF,EAAA,IAAI,OAAO,YAAY,QAAA,EAAU;AAC/B,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kCAAA,EAAqC,OAAO,OAAO,CAAA,CAAE,CAAA;AAAA,EACvE;AACA,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,OAAA,CAAQ,GAAG,CAAA;AAC/B,EAAA,IAAI,MAAM,CAAA,EAAG;AACX,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,yCAAA,EAA4C,KAAK,SAAA,CAAU,OAAO,CAAC,CAAA,CAAE,CAAA;AAAA,EACvF;AACA,EAAA,MAAM,YAAA,GAAe,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA;AACzC,EAAA,IAAI,iBAAiB,MAAA,EAAQ;AAC3B,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,6BAAA,EAAgC,KAAK,SAAA,CAAU,MAAM,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,YAAY,CAAC,CAAA;AAAA,KAC7F;AAAA,EACF;AACA,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,KAAA,CAAM,GAAA,GAAM,CAAC,CAAA;AAClC,EAAA,MAAM,KAAA,GAAQ,YAAY,IAAI,CAAA;AAC9B,EAAA,OAAO,kBAAkB,KAAK,CAAA;AAChC;AAOO,SAAS,YAAA,CACd,QACA,SAAA,EAC4B;AAC5B,EAAA,IAAI,OAAO,SAAA,KAAc,QAAA,EAAU,OAAO,KAAA;AAC1C,EAAA,IAAI,CAAC,SAAA,CAAU,UAAA,CAAW,GAAG,MAAM,CAAA,CAAA,CAAG,GAAG,OAAO,KAAA;AAChD,EAAA,MAAM,IAAA,GAAO,SAAA,CAAU,KAAA,CAAM,MAAA,CAAO,SAAS,CAAC,CAAA;AAC9C,EAAA,IAAI,IAAA,CAAK,MAAA,KAAW,EAAA,EAAI,OAAO,KAAA;AAE/B,EAAA,OAAO,0BAAA,CAA2B,KAAK,IAAI,CAAA;AAC7C;ACxFA,IAAM,eAAA,GAAkB,wBAAA;AAEjB,IAAM,aAAA,GAAgB;AAEtB,IAAM,WAAA,GAAc,CAAA,CACxB,MAAA,EAAO,CACP,KAAA,CAAM,IAAI,MAAA,CAAO,CAAA,CAAA,EAAI,aAAa,CAAA,CAAA,EAAI,eAAe,CAAA,CAAA,CAAG,GAAG,gBAAgB;AAEvE,IAAM,cAAA,GAAiB,CAAA,CAAA,EAAI,aAAa,CAAA,CAAA,EAAI,eAAe,CAAA,CAAA","file":"index.js","sourcesContent":["// Crockford Base32 codec for 16-byte UUID payloads (yielding 26-char strings).\n//\n// Alphabet per https://www.crockford.com/base32.html — `0123456789ABCDEFGHJKMNPQRSTVWXYZ`\n// (32 symbols; the letters I, L, O, U are intentionally excluded for visual\n// disambiguation against digits and to avoid accidental profanity in\n// generated identifiers).\n//\n// Encoding: 16 raw bytes (128 bits) packs into exactly 26 base32 symbols\n// (130 bits with 2 trailing zero-padding bits we drop on encode and\n// reconstruct on decode). No `=` padding character is emitted — UUID payloads\n// are fixed-width.\n//\n// Decoding: case-insensitive (per Crockford spec); we also tolerate the\n// disambiguation map I/L → 1, O → 0. The encoded length MUST be 26 chars;\n// rejection is explicit (callers downstream feed the bytes back into a UUIDv7\n// validator anyway, so we surface the length problem at the codec boundary).\n\nconst ALPHABET = '0123456789abcdefghjkmnpqrstvwxyz';\n\n// 256-entry decode table indexed by lowercased ASCII char code. -1 = invalid.\n// We populate it once at module load.\nconst DECODE_TABLE: Int8Array = (() => {\n  const table = new Int8Array(128).fill(-1);\n  for (let i = 0; i < ALPHABET.length; i++) {\n    const ch = ALPHABET.charCodeAt(i);\n    table[ch] = i;\n    // Uppercase variant (Crockford accepts case-insensitive input).\n    const upper = String.fromCharCode(ch).toUpperCase().charCodeAt(0);\n    table[upper] = i;\n  }\n  // Crockford disambiguation: I, L → 1; O → 0; U is reserved (always invalid).\n  table['I'.charCodeAt(0)] = 1;\n  table['i'.charCodeAt(0)] = 1;\n  table['L'.charCodeAt(0)] = 1;\n  table['l'.charCodeAt(0)] = 1;\n  table['O'.charCodeAt(0)] = 0;\n  table['o'.charCodeAt(0)] = 0;\n  return table;\n})();\n\nexport const CROCKFORD_ENCODED_LENGTH_FOR_UUID = 26;\n\n/**\n * Encode `bytes.length` raw bytes as a lowercase Crockford base32 string.\n * Output length is `ceil(bytes.length * 8 / 5)` — no `=` padding character.\n * For 16-byte UUIDs this produces 26 chars; for 32-byte API-key secrets it\n * produces 52 chars (256 bits of entropy, matching the Stripe / OpenAI /\n * Anthropic secret-key entropy class).\n */\nexport function encodeBytesVariableLength(bytes: Uint8Array): string {\n  let bits = 0;\n  let bitCount = 0;\n  let out = '';\n  for (let i = 0; i < bytes.length; i++) {\n    bits = (bits << 8) | bytes[i]!;\n    bitCount += 8;\n    while (bitCount >= 5) {\n      bitCount -= 5;\n      const idx = (bits >>> bitCount) & 0x1f;\n      out += ALPHABET[idx];\n    }\n  }\n  if (bitCount > 0) {\n    const idx = (bits << (5 - bitCount)) & 0x1f;\n    out += ALPHABET[idx];\n  }\n  return out;\n}\n\n/**\n * Encode 16 raw bytes (a UUID payload) as a 26-char lowercase Crockford\n * base32 string. Throws if the input is not exactly 16 bytes.\n */\nexport function encodeBytes(bytes: Uint8Array): string {\n  if (bytes.length !== 16) {\n    throw new Error(`crockford-base32: expected 16 bytes, got ${bytes.length}`);\n  }\n  // 16 bytes × 8 = 128 bits → 26 × 5 = 130 bits; we pad the input with 2 zero\n  // bits on the right, which simply means we treat byte[15] as occupying the\n  // top 8 bits of a 10-bit window for the final two symbols.\n  return encodeBytesVariableLength(bytes);\n}\n\n/**\n * Decode a 26-char Crockford base32 string back to 16 raw bytes.\n * Case-insensitive; accepts the I/L → 1, O → 0 disambiguation mappings.\n * Throws on wrong length, invalid characters, or non-zero pad bits.\n */\nexport function decodeBytes(encoded: string): Uint8Array {\n  if (encoded.length !== CROCKFORD_ENCODED_LENGTH_FOR_UUID) {\n    throw new Error(\n      `crockford-base32: expected ${CROCKFORD_ENCODED_LENGTH_FOR_UUID}-char input, got ${encoded.length}`,\n    );\n  }\n  const out = new Uint8Array(16);\n  let bits = 0;\n  let bitCount = 0;\n  let outIdx = 0;\n  for (let i = 0; i < encoded.length; i++) {\n    const code = encoded.charCodeAt(i);\n    const value = code < 128 ? DECODE_TABLE[code]! : -1;\n    if (value < 0) {\n      throw new Error(\n        `crockford-base32: invalid character ${JSON.stringify(encoded[i])} at index ${i}`,\n      );\n    }\n    bits = (bits << 5) | value;\n    bitCount += 5;\n    if (bitCount >= 8) {\n      bitCount -= 8;\n      out[outIdx++] = (bits >>> bitCount) & 0xff;\n    }\n  }\n  // After 26 symbols × 5 = 130 bits consumed and 16 bytes × 8 = 128 bits\n  // emitted, there should be exactly 2 trailing zero pad bits. Anything else\n  // means the input wasn't produced by our encoder (or was tampered with).\n  if (bitCount !== 2 || (bits & 0x3) !== 0) {\n    throw new Error('crockford-base32: non-zero pad bits at end of input');\n  }\n  return out;\n}\n","// Stripe-style prefixed resource IDs. The Postgres column stays UUIDv7; the\n// wire form is `<prefix>_<26-char-crockford-base32>`. This module is the\n// only place that knows the byte-level encoding — everything else (Zod\n// schemas, route handlers, SDK types) consumes the helpers below.\n//\n// We intentionally do NOT bind the helpers to a closed prefix enum here: the\n// SDK is published as a versioned dependency and adding a new resource type\n// (e.g. `topup_*`) must not require an SDK bump just to validate the wire.\n// The helpers therefore take the prefix as a generic string parameter; the\n// per-resource Zod schemas in `./zod-schemas.ts` are the place to enumerate\n// the known prefixes for validation purposes.\n\nimport { decodeBytes, encodeBytes } from './crockford-base32';\n\n/**\n * Branded string type — `${prefix}_<26-base32-chars>`. The phantom `__brand`\n * field gives TypeScript a way to refuse a bare string at API boundaries\n * (`function fn(id: PrefixedId<'poe'>)`) while staying ABI-compatible with\n * `string` on the wire and in JSON serialisation.\n */\nexport type PrefixedId<P extends string> = `${P}_${string}` & { readonly __brand: P };\n\n// 32-char hex UUID without separators is what the encoder converts to bytes.\nconst UUID_RE_BYTES = /^[0-9a-f]{32}$/;\n\nfunction uuidStringToBytes(uuid: string): Uint8Array {\n  // Accept canonical 8-4-4-4-12 hyphenated form (case-insensitive) only —\n  // this is what every UUIDv4/v7 library produces and what Postgres returns\n  // for the UUIDv7 columns. Anything else (no hyphens, wrong width, non-hex)\n  // is rejected.\n  const hex = uuid.replace(/-/g, '').toLowerCase();\n  if (!UUID_RE_BYTES.test(hex) || uuid.replace(/[^-]/g, '').length !== 4) {\n    throw new Error(`prefixed-id: not a canonical hyphenated UUID: ${JSON.stringify(uuid)}`);\n  }\n  const out = new Uint8Array(16);\n  for (let i = 0; i < 16; i++) {\n    out[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);\n  }\n  return out;\n}\n\nfunction bytesToUuidString(bytes: Uint8Array): string {\n  if (bytes.length !== 16) {\n    throw new Error(`prefixed-id: expected 16 decoded bytes, got ${bytes.length}`);\n  }\n  const hex = Array.from(bytes, (b) => b.toString(16).padStart(2, '0')).join('');\n  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;\n}\n\n/**\n * Encode a bare canonical UUID string (8-4-4-4-12 hyphenated) into the\n * Stripe-style wire form `${prefix}_<crockford>`.\n */\nexport function encodePrefixedId<P extends string>(prefix: P, uuid: string): PrefixedId<P> {\n  const bytes = uuidStringToBytes(uuid);\n  const encoded = encodeBytes(bytes);\n  return `${prefix}_${encoded}` as PrefixedId<P>;\n}\n\n/**\n * Decode a wire-format prefixed id back to the bare canonical UUID string.\n * Throws when the prefix does not match, the body is not 26 base32 chars,\n * or the encoded payload is malformed.\n */\nexport function decodePrefixedId<P extends string>(prefix: P, encoded: string): string {\n  if (typeof encoded !== 'string') {\n    throw new Error(`prefixed-id: expected string, got ${typeof encoded}`);\n  }\n  const sep = encoded.indexOf('_');\n  if (sep < 0) {\n    throw new Error(`prefixed-id: missing prefix separator in ${JSON.stringify(encoded)}`);\n  }\n  const actualPrefix = encoded.slice(0, sep);\n  if (actualPrefix !== prefix) {\n    throw new Error(\n      `prefixed-id: expected prefix ${JSON.stringify(prefix)}, got ${JSON.stringify(actualPrefix)}`,\n    );\n  }\n  const body = encoded.slice(sep + 1);\n  const bytes = decodeBytes(body);\n  return bytesToUuidString(bytes);\n}\n\n/**\n * Type guard. Cheap-check: matches the prefix and the lowercase Crockford\n * length, but does NOT validate the payload bytes round-trip. Use\n * `decodePrefixedId` when a full validation is required.\n */\nexport function isPrefixedId<P extends string>(\n  prefix: P,\n  candidate: unknown,\n): candidate is PrefixedId<P> {\n  if (typeof candidate !== 'string') return false;\n  if (!candidate.startsWith(`${prefix}_`)) return false;\n  const body = candidate.slice(prefix.length + 1);\n  if (body.length !== 26) return false;\n  // Strict Crockford alphabet — no I, L, O, U; lowercase only on the wire.\n  return /^[0-9a-hjkmnp-tv-z]{26}$/.test(body);\n}\n","// Zod schema gating the CIP-309 record id at every parse boundary (HTTP route\n// handlers, SDK input validation, OpenAPI registration).\n//\n// The regex is the strict Crockford-32 alphabet (lowercase only on the wire,\n// no I/L/O/U). This is stricter than `[0-9a-z]{26}` because it catches the\n// most common typo classes (`poe_…ol1u…`) at the parser rather than letting\n// them through to the decoder for a confusing `non-zero pad bits` error.\n\nimport { z } from 'zod';\n\nconst CROCKFORD_LOWER = '[0-9a-hjkmnp-tv-z]{26}';\n\nexport const POE_ID_PREFIX = 'poe' as const;\n\nexport const PoeIdSchema = z\n  .string()\n  .regex(new RegExp(`^${POE_ID_PREFIX}_${CROCKFORD_LOWER}$`), 'invalid poe id');\n\nexport const POE_ID_PATTERN = `^${POE_ID_PREFIX}_${CROCKFORD_LOWER}$`;\n"]}
+{"version":3,"sources":["../../src/ids/crockford-base32.ts","../../src/ids/prefixed-id.ts","../../src/ids/zod-schemas.ts"],"names":[],"mappings":";;;AAiBA,IAAM,QAAA,GAAW,kCAAA;AAIjB,IAAM,gBAA2B,MAAM;AACrC,EAAA,MAAM,QAAQ,IAAI,SAAA,CAAU,GAAG,CAAA,CAAE,KAAK,EAAE,CAAA;AACxC,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,QAAA,CAAS,QAAQ,CAAA,EAAA,EAAK;AACxC,IAAA,MAAM,EAAA,GAAK,QAAA,CAAS,UAAA,CAAW,CAAC,CAAA;AAChC,IAAA,KAAA,CAAM,EAAE,CAAA,GAAI,CAAA;AAEZ,IAAA,MAAM,KAAA,GAAQ,OAAO,YAAA,CAAa,EAAE,EAAE,WAAA,EAAY,CAAE,WAAW,CAAC,CAAA;AAChE,IAAA,KAAA,CAAM,KAAK,CAAA,GAAI,CAAA;AAAA,EACjB;AAEA,EAAA,KAAA,CAAM,GAAA,CAAI,UAAA,CAAW,CAAC,CAAC,CAAA,GAAI,CAAA;AAC3B,EAAA,KAAA,CAAM,GAAA,CAAI,UAAA,CAAW,CAAC,CAAC,CAAA,GAAI,CAAA;AAC3B,EAAA,KAAA,CAAM,GAAA,CAAI,UAAA,CAAW,CAAC,CAAC,CAAA,GAAI,CAAA;AAC3B,EAAA,KAAA,CAAM,GAAA,CAAI,UAAA,CAAW,CAAC,CAAC,CAAA,GAAI,CAAA;AAC3B,EAAA,KAAA,CAAM,GAAA,CAAI,UAAA,CAAW,CAAC,CAAC,CAAA,GAAI,CAAA;AAC3B,EAAA,KAAA,CAAM,GAAA,CAAI,UAAA,CAAW,CAAC,CAAC,CAAA,GAAI,CAAA;AAC3B,EAAA,OAAO,KAAA;AACT,CAAA,GAAG;AAEI,IAAM,iCAAA,GAAoC;AAS1C,SAAS,0BAA0B,KAAA,EAA2B;AACnE,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,IAAI,QAAA,GAAW,CAAA;AACf,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,QAAQ,CAAA,EAAA,EAAK;AACrC,IAAA,IAAA,GAAQ,IAAA,IAAQ,CAAA,GAAK,KAAA,CAAM,CAAC,CAAA;AAC5B,IAAA,QAAA,IAAY,CAAA;AACZ,IAAA,OAAO,YAAY,CAAA,EAAG;AACpB,MAAA,QAAA,IAAY,CAAA;AACZ,MAAA,MAAM,GAAA,GAAO,SAAS,QAAA,GAAY,EAAA;AAClC,MAAA,GAAA,IAAO,SAAS,GAAG,CAAA;AAAA,IACrB;AAAA,EACF;AACA,EAAA,IAAI,WAAW,CAAA,EAAG;AAChB,IAAA,MAAM,GAAA,GAAO,IAAA,IAAS,CAAA,GAAI,QAAA,GAAa,EAAA;AACvC,IAAA,GAAA,IAAO,SAAS,GAAG,CAAA;AAAA,EACrB;AACA,EAAA,OAAO,GAAA;AACT;AAMO,SAAS,YAAY,KAAA,EAA2B;AACrD,EAAA,IAAI,KAAA,CAAM,WAAW,EAAA,EAAI;AACvB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,yCAAA,EAA4C,KAAA,CAAM,MAAM,CAAA,CAAE,CAAA;AAAA,EAC5E;AAIA,EAAA,OAAO,0BAA0B,KAAK,CAAA;AACxC;AAOO,SAAS,YAAY,OAAA,EAA6B;AACvD,EAAA,IAAI,OAAA,CAAQ,WAAW,iCAAA,EAAmC;AACxD,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,2BAAA,EAA8B,iCAAiC,CAAA,iBAAA,EAAoB,OAAA,CAAQ,MAAM,CAAA;AAAA,KACnG;AAAA,EACF;AACA,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,EAAE,CAAA;AAC7B,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,IAAI,QAAA,GAAW,CAAA;AACf,EAAA,IAAI,MAAA,GAAS,CAAA;AACb,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,OAAA,CAAQ,QAAQ,CAAA,EAAA,EAAK;AACvC,IAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,UAAA,CAAW,CAAC,CAAA;AACjC,IAAA,MAAM,KAAA,GAAQ,IAAA,GAAO,GAAA,GAAM,YAAA,CAAa,IAAI,CAAA,GAAK,EAAA;AACjD,IAAA,IAAI,QAAQ,CAAA,EAAG;AACb,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,oCAAA,EAAuC,KAAK,SAAA,CAAU,OAAA,CAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAA;AAAA,OACjF;AAAA,IACF;AACA,IAAA,IAAA,GAAQ,QAAQ,CAAA,GAAK,KAAA;AACrB,IAAA,QAAA,IAAY,CAAA;AACZ,IAAA,IAAI,YAAY,CAAA,EAAG;AACjB,MAAA,QAAA,IAAY,CAAA;AACZ,MAAA,GAAA,CAAI,MAAA,EAAQ,CAAA,GAAK,IAAA,KAAS,QAAA,GAAY,GAAA;AAAA,IACxC;AAAA,EACF;AAIA,EAAA,IAAI,QAAA,KAAa,CAAA,IAAA,CAAM,IAAA,GAAO,CAAA,MAAS,CAAA,EAAG;AACxC,IAAA,MAAM,IAAI,MAAM,qDAAqD,CAAA;AAAA,EACvE;AACA,EAAA,OAAO,GAAA;AACT;;;ACjGA,IAAM,aAAA,GAAgB,gBAAA;AAEtB,SAAS,kBAAkB,IAAA,EAA0B;AAKnD,EAAA,MAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,IAAA,EAAM,EAAE,EAAE,WAAA,EAAY;AAC/C,EAAA,IAAI,CAAC,aAAA,CAAc,IAAA,CAAK,GAAG,CAAA,IAAK,IAAA,CAAK,OAAA,CAAQ,OAAA,EAAS,EAAE,CAAA,CAAE,MAAA,KAAW,CAAA,EAAG;AACtE,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,8CAAA,EAAiD,KAAK,SAAA,CAAU,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,EACzF;AACA,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,EAAE,CAAA;AAC7B,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,EAAA,EAAI,CAAA,EAAA,EAAK;AAC3B,IAAA,GAAA,CAAI,CAAC,CAAA,GAAI,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,GAAI,CAAC,CAAA,EAAG,EAAE,CAAA;AAAA,EACnD;AACA,EAAA,OAAO,GAAA;AACT;AAEA,SAAS,kBAAkB,KAAA,EAA2B;AACpD,EAAA,IAAI,KAAA,CAAM,WAAW,EAAA,EAAI;AACvB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,4CAAA,EAA+C,KAAA,CAAM,MAAM,CAAA,CAAE,CAAA;AAAA,EAC/E;AACA,EAAA,MAAM,MAAM,KAAA,CAAM,IAAA,CAAK,KAAA,EAAO,CAAC,MAAM,CAAA,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,SAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAAE,KAAK,EAAE,CAAA;AAC7E,EAAA,OAAO,CAAA,EAAG,GAAA,CAAI,KAAA,CAAM,CAAA,EAAG,CAAC,CAAC,CAAA,CAAA,EAAI,GAAA,CAAI,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA,CAAA,EAAI,GAAA,CAAI,KAAA,CAAM,EAAA,EAAI,EAAE,CAAC,CAAA,CAAA,EAAI,GAAA,CAAI,KAAA,CAAM,EAAA,EAAI,EAAE,CAAC,CAAA,CAAA,EAAI,GAAA,CAAI,KAAA,CAAM,EAAE,CAAC,CAAA,CAAA;AAC1G;AAMO,SAAS,gBAAA,CAAmC,QAAW,IAAA,EAA6B;AACzF,EAAA,MAAM,KAAA,GAAQ,kBAAkB,IAAI,CAAA;AACpC,EAAA,MAAM,OAAA,GAAU,YAAY,KAAK,CAAA;AACjC,EAAA,OAAO,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,OAAO,CAAA,CAAA;AAC7B;AAOO,SAAS,gBAAA,CAAmC,QAAW,OAAA,EAAyB;AACrF,EAAA,IAAI,OAAO,YAAY,QAAA,EAAU;AAC/B,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kCAAA,EAAqC,OAAO,OAAO,CAAA,CAAE,CAAA;AAAA,EACvE;AACA,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,OAAA,CAAQ,GAAG,CAAA;AAC/B,EAAA,IAAI,MAAM,CAAA,EAAG;AACX,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,yCAAA,EAA4C,KAAK,SAAA,CAAU,OAAO,CAAC,CAAA,CAAE,CAAA;AAAA,EACvF;AACA,EAAA,MAAM,YAAA,GAAe,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA;AACzC,EAAA,IAAI,iBAAiB,MAAA,EAAQ;AAC3B,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,6BAAA,EAAgC,KAAK,SAAA,CAAU,MAAM,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,YAAY,CAAC,CAAA;AAAA,KAC7F;AAAA,EACF;AACA,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,KAAA,CAAM,GAAA,GAAM,CAAC,CAAA;AAClC,EAAA,MAAM,KAAA,GAAQ,YAAY,IAAI,CAAA;AAC9B,EAAA,OAAO,kBAAkB,KAAK,CAAA;AAChC;AAOO,SAAS,YAAA,CACd,QACA,SAAA,EAC4B;AAC5B,EAAA,IAAI,OAAO,SAAA,KAAc,QAAA,EAAU,OAAO,KAAA;AAC1C,EAAA,IAAI,CAAC,SAAA,CAAU,UAAA,CAAW,GAAG,MAAM,CAAA,CAAA,CAAG,GAAG,OAAO,KAAA;AAChD,EAAA,MAAM,IAAA,GAAO,SAAA,CAAU,KAAA,CAAM,MAAA,CAAO,SAAS,CAAC,CAAA;AAC9C,EAAA,IAAI,IAAA,CAAK,MAAA,KAAW,EAAA,EAAI,OAAO,KAAA;AAE/B,EAAA,OAAO,0BAAA,CAA2B,KAAK,IAAI,CAAA;AAC7C;ACxFA,IAAM,eAAA,GAAkB,wBAAA;AAEjB,IAAM,aAAA,GAAgB;AAEtB,IAAM,WAAA,GAAc,CAAA,CACxB,MAAA,EAAO,CACP,KAAA,CAAM,IAAI,MAAA,CAAO,CAAA,CAAA,EAAI,aAAa,CAAA,CAAA,EAAI,eAAe,CAAA,CAAA,CAAG,GAAG,gBAAgB;AAEvE,IAAM,cAAA,GAAiB,CAAA,CAAA,EAAI,aAAa,CAAA,CAAA,EAAI,eAAe,CAAA,CAAA","file":"index.js","sourcesContent":["// Crockford Base32 codec for 16-byte UUID payloads (yielding 26-char strings).\n//\n// Alphabet per https://www.crockford.com/base32.html — `0123456789ABCDEFGHJKMNPQRSTVWXYZ`\n// (32 symbols; the letters I, L, O, U are intentionally excluded for visual\n// disambiguation against digits and to avoid accidental profanity in\n// generated identifiers).\n//\n// Encoding: 16 raw bytes (128 bits) packs into exactly 26 base32 symbols\n// (130 bits with 2 trailing zero-padding bits we drop on encode and\n// reconstruct on decode). No `=` padding character is emitted — UUID payloads\n// are fixed-width.\n//\n// Decoding: case-insensitive (per Crockford spec); we also tolerate the\n// disambiguation map I/L → 1, O → 0. The encoded length MUST be 26 chars;\n// rejection is explicit (callers downstream feed the bytes back into a UUIDv7\n// validator anyway, so we surface the length problem at the codec boundary).\n\nconst ALPHABET = '0123456789abcdefghjkmnpqrstvwxyz';\n\n// 256-entry decode table indexed by lowercased ASCII char code. -1 = invalid.\n// We populate it once at module load.\nconst DECODE_TABLE: Int8Array = (() => {\n  const table = new Int8Array(128).fill(-1);\n  for (let i = 0; i < ALPHABET.length; i++) {\n    const ch = ALPHABET.charCodeAt(i);\n    table[ch] = i;\n    // Uppercase variant (Crockford accepts case-insensitive input).\n    const upper = String.fromCharCode(ch).toUpperCase().charCodeAt(0);\n    table[upper] = i;\n  }\n  // Crockford disambiguation: I, L → 1; O → 0; U is reserved (always invalid).\n  table['I'.charCodeAt(0)] = 1;\n  table['i'.charCodeAt(0)] = 1;\n  table['L'.charCodeAt(0)] = 1;\n  table['l'.charCodeAt(0)] = 1;\n  table['O'.charCodeAt(0)] = 0;\n  table['o'.charCodeAt(0)] = 0;\n  return table;\n})();\n\nexport const CROCKFORD_ENCODED_LENGTH_FOR_UUID = 26;\n\n/**\n * Encode `bytes.length` raw bytes as a lowercase Crockford base32 string.\n * Output length is `ceil(bytes.length * 8 / 5)` — no `=` padding character.\n * For 16-byte UUIDs this produces 26 chars; for 32-byte API-key secrets it\n * produces 52 chars (256 bits of entropy, matching the Stripe / OpenAI /\n * Anthropic secret-key entropy class).\n */\nexport function encodeBytesVariableLength(bytes: Uint8Array): string {\n  let bits = 0;\n  let bitCount = 0;\n  let out = '';\n  for (let i = 0; i < bytes.length; i++) {\n    bits = (bits << 8) | bytes[i]!;\n    bitCount += 8;\n    while (bitCount >= 5) {\n      bitCount -= 5;\n      const idx = (bits >>> bitCount) & 0x1f;\n      out += ALPHABET[idx];\n    }\n  }\n  if (bitCount > 0) {\n    const idx = (bits << (5 - bitCount)) & 0x1f;\n    out += ALPHABET[idx];\n  }\n  return out;\n}\n\n/**\n * Encode 16 raw bytes (a UUID payload) as a 26-char lowercase Crockford\n * base32 string. Throws if the input is not exactly 16 bytes.\n */\nexport function encodeBytes(bytes: Uint8Array): string {\n  if (bytes.length !== 16) {\n    throw new Error(`crockford-base32: expected 16 bytes, got ${bytes.length}`);\n  }\n  // 16 bytes × 8 = 128 bits → 26 × 5 = 130 bits; we pad the input with 2 zero\n  // bits on the right, which simply means we treat byte[15] as occupying the\n  // top 8 bits of a 10-bit window for the final two symbols.\n  return encodeBytesVariableLength(bytes);\n}\n\n/**\n * Decode a 26-char Crockford base32 string back to 16 raw bytes.\n * Case-insensitive; accepts the I/L → 1, O → 0 disambiguation mappings.\n * Throws on wrong length, invalid characters, or non-zero pad bits.\n */\nexport function decodeBytes(encoded: string): Uint8Array {\n  if (encoded.length !== CROCKFORD_ENCODED_LENGTH_FOR_UUID) {\n    throw new Error(\n      `crockford-base32: expected ${CROCKFORD_ENCODED_LENGTH_FOR_UUID}-char input, got ${encoded.length}`,\n    );\n  }\n  const out = new Uint8Array(16);\n  let bits = 0;\n  let bitCount = 0;\n  let outIdx = 0;\n  for (let i = 0; i < encoded.length; i++) {\n    const code = encoded.charCodeAt(i);\n    const value = code < 128 ? DECODE_TABLE[code]! : -1;\n    if (value < 0) {\n      throw new Error(\n        `crockford-base32: invalid character ${JSON.stringify(encoded[i])} at index ${i}`,\n      );\n    }\n    bits = (bits << 5) | value;\n    bitCount += 5;\n    if (bitCount >= 8) {\n      bitCount -= 8;\n      out[outIdx++] = (bits >>> bitCount) & 0xff;\n    }\n  }\n  // After 26 symbols × 5 = 130 bits consumed and 16 bytes × 8 = 128 bits\n  // emitted, there should be exactly 2 trailing zero pad bits. Anything else\n  // means the input wasn't produced by our encoder (or was tampered with).\n  if (bitCount !== 2 || (bits & 0x3) !== 0) {\n    throw new Error('crockford-base32: non-zero pad bits at end of input');\n  }\n  return out;\n}\n","// Stripe-style prefixed resource IDs. The Postgres column stays UUIDv7; the\n// wire form is `<prefix>_<26-char-crockford-base32>`. This module is the\n// only place that knows the byte-level encoding — everything else (Zod\n// schemas, route handlers, SDK types) consumes the helpers below.\n//\n// We intentionally do NOT bind the helpers to a closed prefix enum here: the\n// SDK is published as a versioned dependency and adding a new resource type\n// (e.g. `topup_*`) must not require an SDK bump just to validate the wire.\n// The helpers therefore take the prefix as a generic string parameter; the\n// per-resource Zod schemas in `./zod-schemas.ts` are the place to enumerate\n// the known prefixes for validation purposes.\n\nimport { decodeBytes, encodeBytes } from './crockford-base32';\n\n/**\n * Branded string type — `${prefix}_<26-base32-chars>`. The phantom `__brand`\n * field gives TypeScript a way to refuse a bare string at API boundaries\n * (`function fn(id: PrefixedId<'poe'>)`) while staying ABI-compatible with\n * `string` on the wire and in JSON serialisation.\n */\nexport type PrefixedId<P extends string> = `${P}_${string}` & { readonly __brand: P };\n\n// 32-char hex UUID without separators is what the encoder converts to bytes.\nconst UUID_RE_BYTES = /^[0-9a-f]{32}$/;\n\nfunction uuidStringToBytes(uuid: string): Uint8Array {\n  // Accept canonical 8-4-4-4-12 hyphenated form (case-insensitive) only —\n  // this is what every UUIDv4/v7 library produces and what Postgres returns\n  // for the UUIDv7 columns. Anything else (no hyphens, wrong width, non-hex)\n  // is rejected.\n  const hex = uuid.replace(/-/g, '').toLowerCase();\n  if (!UUID_RE_BYTES.test(hex) || uuid.replace(/[^-]/g, '').length !== 4) {\n    throw new Error(`prefixed-id: not a canonical hyphenated UUID: ${JSON.stringify(uuid)}`);\n  }\n  const out = new Uint8Array(16);\n  for (let i = 0; i < 16; i++) {\n    out[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);\n  }\n  return out;\n}\n\nfunction bytesToUuidString(bytes: Uint8Array): string {\n  if (bytes.length !== 16) {\n    throw new Error(`prefixed-id: expected 16 decoded bytes, got ${bytes.length}`);\n  }\n  const hex = Array.from(bytes, (b) => b.toString(16).padStart(2, '0')).join('');\n  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;\n}\n\n/**\n * Encode a bare canonical UUID string (8-4-4-4-12 hyphenated) into the\n * Stripe-style wire form `${prefix}_<crockford>`.\n */\nexport function encodePrefixedId<P extends string>(prefix: P, uuid: string): PrefixedId<P> {\n  const bytes = uuidStringToBytes(uuid);\n  const encoded = encodeBytes(bytes);\n  return `${prefix}_${encoded}` as PrefixedId<P>;\n}\n\n/**\n * Decode a wire-format prefixed id back to the bare canonical UUID string.\n * Throws when the prefix does not match, the body is not 26 base32 chars,\n * or the encoded payload is malformed.\n */\nexport function decodePrefixedId<P extends string>(prefix: P, encoded: string): string {\n  if (typeof encoded !== 'string') {\n    throw new Error(`prefixed-id: expected string, got ${typeof encoded}`);\n  }\n  const sep = encoded.indexOf('_');\n  if (sep < 0) {\n    throw new Error(`prefixed-id: missing prefix separator in ${JSON.stringify(encoded)}`);\n  }\n  const actualPrefix = encoded.slice(0, sep);\n  if (actualPrefix !== prefix) {\n    throw new Error(\n      `prefixed-id: expected prefix ${JSON.stringify(prefix)}, got ${JSON.stringify(actualPrefix)}`,\n    );\n  }\n  const body = encoded.slice(sep + 1);\n  const bytes = decodeBytes(body);\n  return bytesToUuidString(bytes);\n}\n\n/**\n * Type guard. Cheap-check: matches the prefix and the lowercase Crockford\n * length, but does NOT validate the payload bytes round-trip. Use\n * `decodePrefixedId` when a full validation is required.\n */\nexport function isPrefixedId<P extends string>(\n  prefix: P,\n  candidate: unknown,\n): candidate is PrefixedId<P> {\n  if (typeof candidate !== 'string') return false;\n  if (!candidate.startsWith(`${prefix}_`)) return false;\n  const body = candidate.slice(prefix.length + 1);\n  if (body.length !== 26) return false;\n  // Strict Crockford alphabet — no I, L, O, U; lowercase only on the wire.\n  return /^[0-9a-hjkmnp-tv-z]{26}$/.test(body);\n}\n","// Zod schema gating the Label 309 record id at every parse boundary (HTTP route\n// handlers, SDK input validation, OpenAPI registration).\n//\n// The regex is the strict Crockford-32 alphabet (lowercase only on the wire,\n// no I/L/O/U). This is stricter than `[0-9a-z]{26}` because it catches the\n// most common typo classes (`poe_…ol1u…`) at the parser rather than letting\n// them through to the decoder for a confusing `non-zero pad bits` error.\n\nimport { z } from 'zod';\n\nconst CROCKFORD_LOWER = '[0-9a-hjkmnp-tv-z]{26}';\n\nexport const POE_ID_PREFIX = 'poe' as const;\n\nexport const PoeIdSchema = z\n  .string()\n  .regex(new RegExp(`^${POE_ID_PREFIX}_${CROCKFORD_LOWER}$`), 'invalid poe id');\n\nexport const POE_ID_PATTERN = `^${POE_ID_PREFIX}_${CROCKFORD_LOWER}$`;\n"]}

package/dist/index.cjs

@@ -499,7 +499,7 @@ function decodeCanonicalCbor(bytes) {
       ...cbor2.cdeDecodeOptions,
       rejectStreaming: true,
       rejectDuplicateKeys: true,
-      // A CIP-309 record carries integers, byte/text strings, arrays, maps and
+      // A Label 309 record carries integers, byte/text strings, arrays, maps and
       // `null` — and nothing else. Without these rejections the major-type-7
       // surface leaks into the decoder: a float16/32/64 that happens to hold an
       // integral value (e.g. 1.0) silently decodes to the integer 1 and passes
@@ -646,7 +646,7 @@ function decodeCanonicalCbor2(bytes) {
       ...cbor2.cdeDecodeOptions,
       rejectStreaming: true,
       rejectDuplicateKeys: true,
-      // A CIP-309 record carries integers, byte/text strings, arrays, maps and
+      // A Label 309 record carries integers, byte/text strings, arrays, maps and
       // `null` — and nothing else. Without these rejections the major-type-7
       // surface leaks into the decoder: a float16/32/64 that happens to hold an
       // integral value (e.g. 1.0) silently decodes to the integer 1 and passes
@@ -747,7 +747,7 @@ function buildSigStructure(args) {
     args.payload
   ]);
 }
-function buildCip309SigStructure(args) {
+function buildLabel309SigStructure(args) {
   const toSign = new Uint8Array(
     CARDANO_POE_SIG_DOMAIN_PREFIX_BYTES.length + args.recordBodyCbor.length
   );
@@ -830,7 +830,7 @@ function decodeCoseSign1(bytes) {
     signature: signatureRaw
   };
 }
-function coseSign1Cip309Verify(args) {
+function coseSign1Label309Verify(args) {
   let decoded;
   try {
     decoded = decodeCoseSign1(args.message);
@@ -897,7 +897,7 @@ function coseSign1Cip309Verify(args) {
       payload: hashedPayload
     });
   } else {
-    sigStructureBytes = buildCip309SigStructure({
+    sigStructureBytes = buildLabel309SigStructure({
       bodyProtectedBytes: decoded.protectedBytes,
       recordBodyCbor: args.detachedRecordBodyCbor
     });
@@ -1402,7 +1402,7 @@ function validateOneUri(chunks, path, errors) {
     const cid = slashIdx === -1 ? rest : rest.slice(0, slashIdx);
     if (!validateCidProfile(cid)) {
       errors.push(
-        issue("INVALID_URI", path, "ipfs:// URI is not a valid CID under the CIP-309 profile")
+        issue("INVALID_URI", path, "ipfs:// URI is not a valid CID under the Label 309 profile")
       );
     }
     return;
@@ -1450,7 +1450,7 @@ function checkItemEnc(item, idx, errors) {
       issue(
         "UNAUTHENTICATED_CIPHER_FORBIDDEN",
         [...basePath, "aead"],
-        `'${enc.aead}' is an unauthenticated cipher; CIP-309 mandates an authenticated (AEAD) cipher`
+        `'${enc.aead}' is an unauthenticated cipher; Label 309 mandates an authenticated (AEAD) cipher`
       )
     );
     return;
@@ -3931,7 +3931,7 @@ function decodeCanonicalCbor3(bytes) {
       ...cbor2.cdeDecodeOptions,
       rejectStreaming: true,
       rejectDuplicateKeys: true,
-      // A CIP-309 record carries integers, byte/text strings, arrays, maps and
+      // A Label 309 record carries integers, byte/text strings, arrays, maps and
       // `null` — and nothing else. Without these rejections the major-type-7
       // surface leaks into the decoder: a float16/32/64 that happens to hold an
       // integral value (e.g. 1.0) silently decodes to the integer 1 and passes
@@ -4546,11 +4546,11 @@ function decodeIntKey(h) {
 // src/verifier/resolve.ts
 var KOIOS_MAINNET_URL = "https://api.koios.rest/api/v1";
 var BLOCKFROST_MAINNET_HOST = "https://cardano-mainnet.blockfrost.io/api/v0";
-var NotACip309RecordError = class extends Error {
+var NotALabel309RecordError = class extends Error {
   code = "METADATA_NOT_FOUND";
   constructor(message) {
     super(message);
-    this.name = "NotACip309RecordError";
+    this.name = "NotALabel309RecordError";
   }
 };
 async function resolveCardanoTx(args) {
@@ -4561,7 +4561,7 @@ async function resolveCardanoTx(args) {
     try {
       return await resolveViaKoios(input.txHash, koiosUrl, fetchFn);
     } catch (e) {
-      if (e instanceof NotACip309RecordError) throw e;
+      if (e instanceof NotALabel309RecordError) throw e;
       lastErr = e;
     }
   }
@@ -4569,7 +4569,7 @@ async function resolveCardanoTx(args) {
     try {
       return await resolveViaBlockfrost(input.txHash, input.blockfrostProjectId, fetchFn);
     } catch (e) {
-      if (e instanceof NotACip309RecordError) throw e;
+      if (e instanceof NotALabel309RecordError) throw e;
       lastErr = e;
     }
   }
@@ -4587,7 +4587,7 @@ async function resolveViaKoios(txHash, koiosUrl, fetchFn) {
   }
   const cborJson = parseJson(cborRes.bytes);
   if (!Array.isArray(cborJson) || cborJson.length === 0) {
-    throw new NotACip309RecordError("koios returned empty array for tx_cbor; tx may not exist");
+    throw new NotALabel309RecordError("koios returned empty array for tx_cbor; tx may not exist");
   }
   const cborEntry = cborJson[0];
   if (typeof cborEntry.cbor !== "string") {
@@ -4608,7 +4608,7 @@ async function resolveViaKoios(txHash, koiosUrl, fetchFn) {
   }
   const infoJson = parseJson(infoRes.bytes);
   if (!Array.isArray(infoJson) || infoJson.length === 0) {
-    throw new NotACip309RecordError("koios returned empty array for tx_info");
+    throw new NotALabel309RecordError("koios returned empty array for tx_info");
   }
   const infoEntry = infoJson[0];
   if (typeof infoEntry.tx_hash === "string" && infoEntry.tx_hash.toLowerCase() !== txHash.toLowerCase()) {
@@ -4753,7 +4753,7 @@ async function verifyOneSig(index, entry, recordBodyCbor, input) {
     return { index, verdict: "unresolved", reason: "SIGNER_KEY_UNRESOLVED" };
   }
   const { pub, signerType } = resolved;
-  const verifyResult = coseSign1Cip309Verify({
+  const verifyResult = coseSign1Label309Verify({
     message: coseBytes,
     detachedRecordBodyCbor: recordBodyCbor,
     expectedSignerKey: pub
@@ -5105,7 +5105,7 @@ async function verifyTx(input) {
   try {
     resolved = await resolveCardanoTx({ input, fetchFn });
   } catch (e) {
-    if (e instanceof NotACip309RecordError) {
+    if (e instanceof NotALabel309RecordError) {
       return base({
         verdict: "failed",
         exit_code: 1,
@@ -5446,7 +5446,7 @@ function prepareSigStructure(args) {
   }
   const { protectedHeaderBytes } = encodePath1ProtectedHeader(args.signerPubkey);
   const recordBodyCbor = encodeRecordBodyForSigning(args.record);
-  const sigStructureBytes = buildCip309SigStructure({
+  const sigStructureBytes = buildLabel309SigStructure({
     bodyProtectedBytes: protectedHeaderBytes,
     recordBodyCbor
   });
@@ -5540,7 +5540,7 @@ function extractProblemExtensions(problem) {
   }
   return out;
 }
-var Cip309HttpError = class extends Error {
+var Label309HttpError = class extends Error {
   problem;
   code;
   httpStatus;
@@ -5555,7 +5555,7 @@ var Cip309HttpError = class extends Error {
   retryAfterSeconds;
   constructor(init) {
     super(init.problem.detail || `${init.problem.title} (HTTP ${init.problem.status})`);
-    this.name = "Cip309HttpError";
+    this.name = "Label309HttpError";
     this.problem = init.problem;
     this.code = init.problem.code;
     this.httpStatus = init.problem.status;
@@ -5572,7 +5572,7 @@ var Cip309HttpError = class extends Error {
 };
 
 // src/client/batch-empty-error.ts
-var BatchEmptyError = class extends Cip309HttpError {
+var BatchEmptyError = class extends Label309HttpError {
   constructor(init) {
     super(init);
     this.name = "BatchEmptyError";
@@ -5583,7 +5583,7 @@ var BatchEmptyError = class extends Cip309HttpError {
 function readInt(value) {
   return typeof value === "number" && Number.isFinite(value) ? value : void 0;
 }
-var BatchTooLargeError = class extends Cip309HttpError {
+var BatchTooLargeError = class extends Label309HttpError {
   max;
   got;
   constructor(init) {
@@ -5595,7 +5595,7 @@ var BatchTooLargeError = class extends Cip309HttpError {
 };
 
 // src/client/forbidden-error.ts
-var ForbiddenError = class extends Cip309HttpError {
+var ForbiddenError = class extends Label309HttpError {
   constructor(init) {
     super(init);
     this.name = "ForbiddenError";
@@ -5603,7 +5603,7 @@ var ForbiddenError = class extends Cip309HttpError {
 };
 
 // src/client/idempotency-conflict-error.ts
-var IdempotencyConflictError = class extends Cip309HttpError {
+var IdempotencyConflictError = class extends Label309HttpError {
   constructor(init) {
     super(init);
     this.name = "IdempotencyConflictError";
@@ -5623,7 +5623,7 @@ function readBigIntString(value) {
 function readString(value) {
   return typeof value === "string" ? value : void 0;
 }
-var InsufficientFundsError = class extends Cip309HttpError {
+var InsufficientFundsError = class extends Label309HttpError {
   balanceUsdMicros;
   requiredUsdMicros;
   topUpUrl;
@@ -5641,7 +5641,7 @@ function readScopeArray(value) {
   if (!Array.isArray(value)) return [];
   return value.filter((entry) => typeof entry === "string");
 }
-var InsufficientScopeError = class extends Cip309HttpError {
+var InsufficientScopeError = class extends Label309HttpError {
   requiredScopes;
   grantedScopes;
   constructor(init) {
@@ -5657,7 +5657,7 @@ var InsufficientScopeError = class extends Cip309HttpError {
 };
 
 // src/client/internal-server-error.ts
-var InternalServerError = class extends Cip309HttpError {
+var InternalServerError = class extends Label309HttpError {
   constructor(init) {
     super(init);
     this.name = "InternalServerError";
@@ -5665,7 +5665,7 @@ var InternalServerError = class extends Cip309HttpError {
 };
 
 // src/client/invalid-body-error.ts
-var InvalidBodyError = class extends Cip309HttpError {
+var InvalidBodyError = class extends Label309HttpError {
   constructor(init) {
     super(init);
     this.name = "InvalidBodyError";
@@ -5673,7 +5673,7 @@ var InvalidBodyError = class extends Cip309HttpError {
 };
 
 // src/client/malformed-cbor-error.ts
-var MalformedCborError = class extends Cip309HttpError {
+var MalformedCborError = class extends Label309HttpError {
   constructor(init) {
     super(init);
     this.name = "MalformedCborError";
@@ -5681,7 +5681,7 @@ var MalformedCborError = class extends Cip309HttpError {
 };
 
 // src/client/not-found-error.ts
-var NotFoundError = class extends Cip309HttpError {
+var NotFoundError = class extends Label309HttpError {
   constructor(init) {
     super(init);
     this.name = "NotFoundError";
@@ -5692,7 +5692,7 @@ var NotFoundError = class extends Cip309HttpError {
 function readString2(value) {
   return typeof value === "string" ? value : void 0;
 }
-var QuoteAlreadyConsumedError = class extends Cip309HttpError {
+var QuoteAlreadyConsumedError = class extends Label309HttpError {
   quoteId;
   constructor(init) {
     super(init);
@@ -5705,7 +5705,7 @@ var QuoteAlreadyConsumedError = class extends Cip309HttpError {
 function readString3(value) {
   return typeof value === "string" ? value : void 0;
 }
-var QuoteExpiredError = class extends Cip309HttpError {
+var QuoteExpiredError = class extends Label309HttpError {
   quoteId;
   constructor(init) {
     super(init);
@@ -5718,7 +5718,7 @@ var QuoteExpiredError = class extends Cip309HttpError {
 function readString4(value) {
   return typeof value === "string" ? value : void 0;
 }
-var QuoteNotFoundError = class extends Cip309HttpError {
+var QuoteNotFoundError = class extends Label309HttpError {
   quoteId;
   constructor(init) {
     super(init);
@@ -5728,7 +5728,7 @@ var QuoteNotFoundError = class extends Cip309HttpError {
 };
 
 // src/client/rate-limited-error.ts
-var RateLimitedError = class extends Cip309HttpError {
+var RateLimitedError = class extends Label309HttpError {
   constructor(init) {
     super(init);
     this.name = "RateLimitedError";
@@ -5736,7 +5736,7 @@ var RateLimitedError = class extends Cip309HttpError {
 };
 
 // src/client/record-not-found-error.ts
-var RecordNotFoundError = class extends Cip309HttpError {
+var RecordNotFoundError = class extends Label309HttpError {
   constructor(init) {
     super(init);
     this.name = "RecordNotFoundError";
@@ -5744,7 +5744,7 @@ var RecordNotFoundError = class extends Cip309HttpError {
 };
 
 // src/client/service-unavailable-error.ts
-var ServiceUnavailableError = class extends Cip309HttpError {
+var ServiceUnavailableError = class extends Label309HttpError {
   constructor(init) {
     super(init);
     this.name = "ServiceUnavailableError";
@@ -5752,7 +5752,7 @@ var ServiceUnavailableError = class extends Cip309HttpError {
 };
 
 // src/client/unauthorized-error.ts
-var UnauthorizedError = class extends Cip309HttpError {
+var UnauthorizedError = class extends Label309HttpError {
   constructor(init) {
     super(init);
     this.name = "UnauthorizedError";
@@ -5760,7 +5760,7 @@ var UnauthorizedError = class extends Cip309HttpError {
 };
 
 // src/client/validation-failed-error.ts
-var ValidationFailedError = class extends Cip309HttpError {
+var ValidationFailedError = class extends Label309HttpError {
   constructor(init) {
     super(init);
     this.name = "ValidationFailedError";
@@ -5878,7 +5878,7 @@ function parseHttpError(args) {
     case "fx-stale":
       return new ServiceUnavailableError(init);
     default:
-      return new Cip309HttpError(init);
+      return new Label309HttpError(init);
   }
 }
 
@@ -6339,7 +6339,7 @@ var PoeNamespace = class {
    * publish time against the locked price snapshot.
    *
    * On HTTP-level failure (auth, rate limit, malformed request) this throws
-   * a typed `Cip309HttpError` subclass. Per-file failures inside a 200
+   * a typed `Label309HttpError` subclass. Per-file failures inside a 200
    * response are NOT thrown by `uploads()` itself — the response body is
    * returned verbatim so the caller can decide how to react. The
    * higher-level helpers (`publishSealed`, `publishMerkle`) treat any failed
@@ -6424,7 +6424,7 @@ var PoeNamespace = class {
   }
   /**
    * High-level hash-only publish: hash the supplied content, build a
-   * single-item CIP-309 record, optionally sign it with the caller-supplied
+   * single-item Label 309 record, optionally sign it with the caller-supplied
    * signer, and submit. No Arweave, no storage round-trip — anchors the
    * digest only.
    */
@@ -6442,7 +6442,7 @@ var PoeNamespace = class {
   /**
    * Sealed-PoE: encrypt the supplied content to the recipient X25519 public
    * keys (age-style sealed envelope), upload the ciphertext to Arweave via
-   * /uploads, build a CIP-309 record with the resulting `ar://` URI, sign
+   * /uploads, build a Label 309 record with the resulting `ar://` URI, sign
    * it (optional), and submit via /publish.
    *
    * The sender SHOULD include their own X25519 public key in `recipients`
@@ -6540,7 +6540,7 @@ var RecordsNamespace = class {
     return await readJson(response);
   }
   /**
-   * Run the canonical CIP-309 verifier against the record at `txHash`.
+   * Run the canonical Label 309 verifier against the record at `txHash`.
    * Returns the same `VerifyReport` shape the standalone verifier emits —
    * `VerifyReport` IS the wire body of this endpoint, with no transformer in
    * between.
@@ -6563,31 +6563,31 @@ var RecordsNamespace = class {
   }
 };
 
-// src/client/cip309-client.ts
+// src/client/label-309-client.ts
 function resolveFetch(provided) {
   if (provided !== void 0) return provided;
   if (typeof globalThis.fetch === "function") {
     return globalThis.fetch.bind(globalThis);
   }
   throw new Error(
-    "Cip309Client: no fetch implementation available. Pass `fetch` in the config or run on a platform with globalThis.fetch."
+    "Label309Client: no fetch implementation available. Pass `fetch` in the config or run on a platform with globalThis.fetch."
   );
 }
 function resolveBaseUrl(config) {
   const baseUrl = config.baseUrl?.trim();
   if (baseUrl === void 0 || baseUrl === "") {
     throw new InvalidClientConfigError(
-      "Cip309Client: baseUrl is required. Pass the base URL of the CIP-309 gateway you are targeting (e.g. https://gateway.example.com)."
+      "Label309Client: baseUrl is required. Pass the base URL of the Label 309 gateway you are targeting (e.g. https://gateway.example.com)."
     );
   }
   return baseUrl.replace(/\/$/, "");
 }
-var Cip309Client = class {
+var Label309Client = class {
   poe;
   records;
   account;
   /**
-   * Construct a client against a CIP-309 gateway.
+   * Construct a client against a Label 309 gateway.
    *
    * `config.baseUrl` is required — there is no default deployment. The
    * `config.apiKey`, when supplied, is an opaque bearer token sent verbatim as
@@ -7028,8 +7028,6 @@ exports.BatchTooLargeError = BatchTooLargeError;
 exports.BodyTooLargeError = BodyTooLargeError;
 exports.CONFIRMATION_DEPTH_THRESHOLD_DEFAULT = CONFIRMATION_DEPTH_THRESHOLD_DEFAULT;
 exports.CROCKFORD_ENCODED_LENGTH_FOR_UUID = CROCKFORD_ENCODED_LENGTH_FOR_UUID;
-exports.Cip309Client = Cip309Client;
-exports.Cip309HttpError = Cip309HttpError;
 exports.DEFAULT_OUTBOUND_MAX_BYTES = DEFAULT_OUTBOUND_MAX_BYTES;
 exports.DEFAULT_PROFILE = DEFAULT_PROFILE;
 exports.DENY_HOSTS_DEFAULT = DENY_HOSTS_DEFAULT;
@@ -7043,8 +7041,10 @@ exports.InternalServerError = InternalServerError;
 exports.InvalidBodyError = InvalidBodyError;
 exports.InvalidClientConfigError = InvalidClientConfigError;
 exports.KOIOS_MAINNET_URL = KOIOS_MAINNET_URL;
+exports.Label309Client = Label309Client;
+exports.Label309HttpError = Label309HttpError;
 exports.MalformedCborError = MalformedCborError;
-exports.NotACip309RecordError = NotACip309RecordError;
+exports.NotALabel309RecordError = NotALabel309RecordError;
 exports.NotFoundError = NotFoundError;
 exports.OffHostSignError = OffHostSignError;
 exports.OutboundExhaustedError = OutboundExhaustedError;